last executing test programs:

21.848482953s ago: executing program 2 (id=5818):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
accept$packet(r0, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async)
ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000))
r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
writev(r2, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0xc)

21.848236559s ago: executing program 2 (id=5819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}, 0x1, 0x15}, 0x0)

21.789996323s ago: executing program 1 (id=5821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xfc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_LABELS_MASK={0x18, 0x17, [0x4, 0x0, 0x4, 0x360, 0x4]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xa6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x679}, @CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_LABELS_MASK={0x8, 0x17, [0x3]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffd05}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfbfc}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xb8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) (async)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x2}}, 0x10)

21.789167135s ago: executing program 2 (id=5823):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x1, 0x100)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000300000000000000140003"], 0x114}], 0x1}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r2)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1894e41c94fee501}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r3, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000ffd94ac2346123a3a38b599b82b8b100f2e720f1218010642a1f53d257cd30fa2ce6ee7ab9ad2d0d977d7e17d211bda3bc0eeda3ae77372ec0433c0cc98cbed2898f22dce570ac139070c8994f7a37", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x20}}, 0x0)

21.788860097s ago: executing program 1 (id=5824):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1000)
getsockopt$rose(r4, 0x104, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7400ccd9060a0b0400000000000000000200000048000480440001800a0001006d617463680000e5f1000080180003004cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073760a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)

21.679122287s ago: executing program 2 (id=5825):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d0076"], 0x34}}, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x1f, r2})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r2}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'sit0\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000085}, 0x800)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r7], 0x24}}, 0x4000)

21.678468953s ago: executing program 1 (id=5827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000500000000005865b2189bf9000000000000", @ANYRES32, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800)

21.619763024s ago: executing program 1 (id=5829):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r1, &(0x7f00000001c0)="240000001a005f0214f9f4070009060681000000040027f2439e1c7832fdfbff01000000", 0x24)
socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r4)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2503000000b25976eff273fc2742f1e82ff814c4d6c3eeed0255000a11f7f432adcf63bd7f101dddf98d334b2d222b5f9385a0e00c42a89b"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000e6d00000000040040000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000009400000083000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x27, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000a28778362ef77fa6efbc0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21.618465921s ago: executing program 2 (id=5830):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240))
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1412, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}}}]}, 0x38}}, 0x0)

21.54020995s ago: executing program 1 (id=5831):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x5, 0x4)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}, 0x600}], 0x3fffffffffffd54, 0x4c015)

21.539390665s ago: executing program 2 (id=5832):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r3, 0x10000)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='V', 0x1}], 0x1)

21.416273834s ago: executing program 32 (id=5832):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
listen(r3, 0x10000)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='V', 0x1}], 0x1)

21.368914289s ago: executing program 1 (id=5835):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
unshare(0x22020600) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2525000000050029000000000005002b000302000005002e00970000060000000000008b0530047e"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) (async)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r4, &(0x7f0000000000)="2a000200010078", 0x7) (async)
shutdown(r3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x5, 0x2, 0x2, 0x5}, 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async)
r7 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r7, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000009000000000000000014001462726f61606361b98ffa45347449dba2dcf0c21341bf73742d6c696e6b0004000000000000000000af33ed0cd5cdee4070feb05aa18e867b1177351a82c8610f7e477c5d710dd5674278c1d1c36ef31c4d7893010322ddff3ef5d083256fb31692061b3428a90ad9c208c4823ff6cf228c8acb858356d8de7ab6a0ed601c3dbe323d48912e4fce67768047f4048684eea3b1436e1aaef12eb53f25896a51f9ecefb092bf0dea12f92a36c6705570b46e63e5c939b482321f47c41543532ae419ae97206cf0d15282ab1fa0"], 0x30}}, 0x0) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)

21.304010304s ago: executing program 33 (id=5835):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
unshare(0x22020600) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2525000000050029000000000005002b000302000005002e00970000060000000000008b0530047e"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) (async)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r4, &(0x7f0000000000)="2a000200010078", 0x7) (async)
shutdown(r3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x5, 0x2, 0x2, 0x5}, 0x50) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async)
r7 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r7, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000009000000000000000014001462726f61606361b98ffa45347449dba2dcf0c21341bf73742d6c696e6b0004000000000000000000af33ed0cd5cdee4070feb05aa18e867b1177351a82c8610f7e477c5d710dd5674278c1d1c36ef31c4d7893010322ddff3ef5d083256fb31692061b3428a90ad9c208c4823ff6cf228c8acb858356d8de7ab6a0ed601c3dbe323d48912e4fce67768047f4048684eea3b1436e1aaef12eb53f25896a51f9ecefb092bf0dea12f92a36c6705570b46e63e5c939b482321f47c41543532ae419ae97206cf0d15282ab1fa0"], 0x30}}, 0x0) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000)

2.126319732s ago: executing program 0 (id=6224):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}], 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0)

2.069597345s ago: executing program 0 (id=6225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000a6c0), r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0xdd, 0x14}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048090}, 0x200440c1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r4, 0xff04, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0xffffffff, @remote}}}, 0x88)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f000000a7c0)={&(0x7f000000a680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000a780)={&(0x7f000000a700)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1.349245418s ago: executing program 3 (id=6234):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x53)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={<r3=>0x0, 0x6}, &(0x7f0000000280)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x3ff, @private1, 0x200}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="8c3e64965e2d7a0f60c8cba31083a9c2b59d497a38b805291ff5fc9947c699beba8baf2672b2183aeaeee470389fadb48c", 0x31}], 0x1, &(0x7f00000002c0)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x7, 0x1, 0x8, 0x7fff}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x201, 0x1000, 0xb2, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0xa8, 0x800}, 0xc0)
sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)='\b', 0x1}], 0x1}}], 0x1, 0x0)

1.348326173s ago: executing program 3 (id=6235):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000200334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256c85591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x810)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r2, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r6, &(0x7f0000001100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r8 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r8, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000008000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20)
openat$cgroup_ro(r9, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

1.20051392s ago: executing program 0 (id=6236):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x2, 0x5, 0xffff, 0x3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'})

1.123088654s ago: executing program 3 (id=6237):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000a6c0), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f000000a7c0)={&(0x7f000000a680)={0x10, 0x0, 0x2000000, 0x400000}, 0xc, &(0x7f000000a780)={&(0x7f000000a700)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1.122626161s ago: executing program 3 (id=6238):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x1100}, 0x70)

1.018869596s ago: executing program 3 (id=6239):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0x14)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, 0x0, 0x0, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)

929.174384ms ago: executing program 0 (id=6240):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x4, [<r3=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e23, 0xfffffff7, @mcast1, 0x16b}}, 0x1, 0x4fd6, 0x7fffffff, 0x4, 0xc2, 0x6, 0x7}, 0x9c)
shutdown(r2, 0x1)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
socket$inet(0xa, 0x801, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x8, 0xa, 0xc}, @ldst={0x3, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb721704}, @ringbuf_query, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
socketpair(0x10, 0x80f, 0x9, &(0x7f0000000000))
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
close(r9)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r7, 0x0, 0x1100000000f336, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000303a0000000000000000000000000000000000ff02000000000000000000000000000104039078000000006000000000002c00fc01000020010000000000000000000000000001"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

927.359383ms ago: executing program 4 (id=6241):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000018c0)={'vcan0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001980)={'sit0\x00', &(0x7f0000001900)={'tunl0\x00', <r5=>0x0, 0x8, 0x700, 0x5, 0x0, {{0x17, 0x4, 0x3, 0x13, 0x5c, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @rand_addr=0x9, {[@noop, @lsrr={0x83, 0x17, 0xb9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @local]}, @end, @ssrr={0x89, 0xb, 0xe1, [@private=0xa010101, @private=0xa010100]}, @rr={0x7, 0x1f, 0xae, [@private=0xa010102, @multicast1, @private=0xa010101, @multicast1, @loopback, @rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0x1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmmsg$inet(r3, &(0x7f00000031c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fbbb3c995d71235a43222cbf9a7d89204800fd2649c034b752f144b8c86b831b", 0x20}, {&(0x7f00000004c0)="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", 0x1000}], 0x2}}, {{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="affb39da77ac21cf3100a5c5fa551d150f9266a090fde1ab3002111a6d98fa64d3a69081eff3b64a4d13961611097fbfb6110897edafa4b978e2750e84f842bf24593afb81c7ee4bbc3446477a492e2302fa59a78649630d6f40d2c6e184cf7e61de19fb0d3525acd063cc0f75c384f1a428338a0d087cd63690fa8a84bfe55badfcbe6788dbcdf0539417c5a8543aa3cb7ec12a11a9cf7e7c3a630289d2c9e961973f951f207902ffd2422fda1232e83d08a82f860817f3f3ea991b8ad420670cf18b88ada3026989deb8051cd1007e53fa50fdcd", 0xd5}, {&(0x7f0000000300)="eb27622c5dce7b032b327c1991aefc18702c8f1882f4cbb91a6535af40c6cb9b142b7ee8d92122ef353dd5bd465e8213eaab25ce0013fd568b59240be40a4a46f32e8e87b2d25848fb064bea6d", 0x4d}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff00}}, @ip_retopts={{0x10}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xfc, [@broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast1, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000014c0)="e5127f224587d728c3c20aa40b401df6c8deeb1f793ea10434ef250d2fdeab908315097903b58b95729b1a400035a8efda65cdcf29db5c4de59491d8aeaf6d5c47017ec9e8647cfa5d3cb13d68184869be5fbc53093e8d3b63f3f8b7cc38981af5a1cc0a6aaedeb9ece4ffcba4add461ccf1dcd09e1b51fac24b8863ee85f44d42ebf05bbd3b46dc25af3a6abc0084eeb5d300b448b4fc78b7772850cd5b1ccc73b65a12a4d70b023bb7416267f7650e56f8dc612bbbbd43e6b2bcdced25dfc3677e93734fbdb01da6c0d7dbc4dbe03a29081bd9150230cca0a91bcebb55bb93f23c343cadbbdcceb159b2de7da33858bc8c93763c", 0xf5}, {&(0x7f00000015c0)="9abe08bf8bf58d36d0991fb3fa368eaa206e44762adc0742627e0de4f6eb185918b67955f11fd63307d15eabd68b4639f2e494de851153b9147c58c99e5cf08616398965fc357bf0692494f1d1233404d42ef79f47ef81333dccd1fc2bc67d770892615d0ecbe558df82e3aef8327218496c70cfed5d32239fb58628b8676c4642c7b1ef1e39c59a09202b809c1cdd7c0b6c1a06e029e8f7d615b5d9bd547bdbfb46293c698e43b4c8c806e8f2515c2cfec08f1b44b7f5385647d7c21e966294afdeb9aaeb45b06a2a28f95ab5250cba11fc5a09c715", 0xd6}, {&(0x7f00000016c0)="35fa969f823ac9af54bdef4bf16af9bc1ed3d5f47b38df0c6674b6e2e6d4a46d14", 0x21}, {&(0x7f0000001700)="ea90991410dcc6c828c90659d08aea01950742baa4084eb3ba8314e8a2f168af01817917d374e6c0bfc81e81be4ef24ed4c3631080df41b44d27b441cd2ba215dc1237cab8c239c5e54c712ab50940c69a7f026e07937e4d6c0abef308103819dbb3a5669f28d19570e46745bcee168403", 0x71}, {&(0x7f0000001780)="12366d9d2bc1ad36cba15dec9a36a7086e799fad99edb639a82f89de44fcdee15c08b224c728a0ffd7f0545bf86ac2109d44c9b54d8530f855de", 0x3a}, {&(0x7f00000017c0)="4fd818ac849155b1f80113851b1027808dc020f6775b54ddd2ebd923524270fd504e79aea95e58c0a77c5c06f997760620ce069960498fbb62", 0x39}, {&(0x7f0000001800)="91b7d2e65f6079e9be79f0d0df20ccbdd31c", 0x12}], 0x7, &(0x7f0000001a80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x4, "edcb"}, {0x5, 0x4, "20fe"}, {0x5, 0x11, "f57680f674937dea937c1641265f1f"}, {0x6, 0x10, "f9f2279d9864f57fa1630c2c4f9a"}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xb, 0x0, 0x7, [0x2, 0x114]}, @timestamp={0x44, 0xc, 0x91, 0x0, 0x1, [0x7, 0x93]}, @ssrr={0x89, 0x1f, 0x54, [@private=0xa010101, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}]}, @lsrr={0x83, 0x1b, 0xf3, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @broadcast, @broadcast]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101}}}], 0x188}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001c80)="8ef8a8ab8fbe4b2a875b26da082b347cd90036972d04e2cd46fba63de82742a5d7ccf3102de274f943ebab8b4a5369581e30eaf467418f06eefb8080844a990f046fc698b1b046e59b23c0a2b83a71cfca0b4d6673", 0x55}, {&(0x7f0000001d00)="7ed21db6e37fc3f53033b26f15545593f8b0badc1446b1018ca0c604cc0b3d4eecb41935a13fc03a0e56e08407928ba1cb2c185b8c56c153770b68e3d29e983b6f5a280c9ad7708b8d56cd1a15a083967efec0fc1b788fb3122207703be381f636d88092b1e1ca5dec15cbb6bd56e03b8b24ff4a0ef46c866fafe3851a20cee1736a5bf39ed2ca741b1de867d5199e3f5281a2cc3d92a5e17451a870cb8b9ecff81bbad491b224c462465182ee505154738b5c069a060ca28d10baa574e1c8afe538b2915412be91b7e3d7ba8e60182567ded1d2cead8dfb2cd83d946f79ee1ed6867dc2b6e81a007678e1887cefd643597127bca1248b0c88b7a9a5459dff52325e7f6844df6279034eb3363919aa84e39bc4ce9c357abdfd683d42a19f99f0f00b4d64e714a53a6f24010ffc5cf3190067a004852188cd36adf600131a475001f4fb94536b50ed7f11c27ade452b7769ce08f18d7d09f1f5a2a4fa6bae1b47840abc946a5fd8f85917b9e1f8e4105c2177023f5c775ca353dda0480038c2ec2cadc2a6d29fca7efd2be4e9ba5f0f87a773d8e4c993ef3f2844bd7f120da5f23bbd20841b14a689dfe6cf5fac9dc30535c955d5807bc296b6c0f1ec57bb33ef80a9ef3a2073d9083f2dd73a8f54b7d603e1241d333cb97cb09f247ae0e380c69ea87f1679fe218ba16a11576558a23ec592ac6ce193aaa9c133d2691658d164616f04f13c8b791a043062386390c787ad59388793795b3c7a39e6e03a1ce6f08089d8acf5dfdb5189f1786a241598dcdb9c9698b7506cc46b591969518b62e11481e7244e1f318c3cfc45a7b159ffe374c297b4cec43a1bf8cd77355ef542a94a8684eb7151723a25a811ba4fc14214f83fe6d0db1b606499201b86ed3533fd113baca47f1db16afa3461a8da8cda8e1944084efc94f2418a650eb687539b7ee1cf8072bc3a1e7d96f55ed32096a324f0fbba3bfdaac7b8abe7570a432d93faddb55b07b64ad8afab8277af4237f7be147ff4fd2e8cfa48b823b3f15a5e362a415fd4c3f0fdb0d4999906fa937e22d3484174bda91edf95dd4adadce203289b5a7f663e1e05580df012b5c0ba67ac45f0be769ff8482e072abfd6d7192b40adc060ea8d99510a132052f3744053414dcf515ca65a83da0829c785e8e412336e63595e4c80d251e23d4ce1955827cfbc523c3d8948da2cb943e6a18b45b0ab3242f32adc93313d3d6aab03b04e097a26440e552121eb0e70a263eab259e8b2331f45a4cee58055cf899a2f17e3e04f3365b13f32c607eae718f03574c222dcdb8314d85bb94d8172524ce0ecfbb2cb044ce9c00ef0c52b141f3bf0ca823bdd282ead8f249bd5a320d065c94fef538ab471e0f4b87e13ee2c8c4cca78e70424236bd626c79df90bf7739c0c6d5169e6dd9e1a439d56df3dd8195619190839705d9168c68fd150a7bf7cadaa8679a6085d64b054e6b9e19b0ecde1ff0d7ced572cefdff99613d1516d3401fa652bd102438ee47d1dc952cdbbb244ccd358c11ae0f54e68d6a57b0f7c723b1eeb418651f8010fc540e02b7c12160fb6f7ed2a8c312c562e7915c2f431eaa51e051c0c38598b7a7abe55ef6db877508b3ecd35f9fab01dba4b00fc3d98611bce0fc7f2c48ecfb6dd5c1e5145c129a30380a345c264b44dd68e52f79327e45e98e6cec206509e1ac8a720f4697a3fca823ee13e5b158ad1d5325f620050bc31f53f8cc44fd568157e6a3ffc3a3c40ebecb68522519bf01d8573d5307de960eef5a505c2923d687425225b8f3a955d825394c0ece8c8ac1e8dffd8745dd3cd782939afac5d61594ba4c43a980953a7d3b7edb40ca0e612c0b70b31929047904590414473ac6cace3dd27230d190990e7f354c461fc44a262a76e1a7a276754b93f60527b9463226a0b12f48510ecc74d1701ee6922ab78674ee44538386c25ccd0705f9a707defa3f626c143ca1ff1c07d38305cb9f8b97608141060028d0a6ac5cc910e83c84b0dc414cedb046760e703b221fb6128e72e035e2e6f34820e0a385ca8720214a0f2d61f697eb1d60d85e9dd9779f54844c9f65cd95d31d325437bd0485b65a024e0f2f61d6ed2a3b3a7e34f273ef76f1b0ce363eb95cbc3d66f02cf97d455b64d30504b7ac01896d99563b8c7e19d155241d0de70dd028de23d6e4f478bf035b26d2c7dc503897c0fbe42ac748dd58b0ee8703f99ddb8d9b87022a7403ec111c70778351e1fbe1d945bbe784669961842d2aa7a212e058da69d5544beab3f9a5ee500fd4d585241bd6ed24799c3d925cbe8fadc629b448d9971d391a7f6c6865bcc4d08c5e146064e24d94c5eb7c75f5ce93a09f712b0fe20eb26a80a33a048dc3794d267de1bb4d2d73e1e8dacef7817b3e3698fdd5777a27ed2453972f46238ad6ee38aaa824b92c402268735a32e6bcf6bebe15daf9c7c2c8a06eacfd281c3bf884b4b4615a824b0814806415515bdde2bf2f35a0634be81b6ab41eccdc725f86801b53057f567daf0a61559380a0323bea2430ee8fcf4717c317ace323c2f1ae8f0d2d9584258647c508da3a17b06889f8be0c65445ad04fdce70c4633da18d53b03bd419f9c4a427a8c992d9b12f4c7b4e669c081f0c8900c33ad8a7fe8d67f5060a5bc46310f9311630a673ebb8ece5d872ab2b20b9e7a782f3f72432716fac34746beeec60515e889e47ddd94612d87e9a5628d74cdf661ebf0a23734339115d17111c41e6133feb0a067742aa84a5af4c8e45706e1137909a220f11e322c5d7eea0ca1ec4ba80c0ae5b1e6cc98691b41bc317a717623562c1f7b293d161f52d2fab7ca05df965bb63a3c78cf7cbd398ab4ed42013ea7d1357890aa12382f3f9cef7c2671bc234d8a6a215b5f628579771eab365ff9f379818176ed9fcda422720f5e5f582de4f14ab701677062676c24e04ad7d85d335c4acf243c55bf97ebdf9b36908ed9154250d68337e4a84f03f450798f069c773be7c1f4927e27f97f60e7e32e2b56f41c7a5d8eef93f5d4666e40de9a6a07f4879a221dc2659e469abdcfb273adefb931c0fc883331be1af46122d44a75c83f89fc65f58a4e0bf48f79e5973bd320a57ac8856236646edb4328c1c9fc3df3b58fd964aa0d628ab81f3079ed003de4159d1537347dbf9ddff2873332e648f984b27b775e17938178e579562c965cbf1af941988560f7c0b6bec40e0aa9d8b84a26fef03eca4c38b9e3a77c703a7f752090bc04602215506eb83d6256e64e5ed076d4b9b044d62650be142f335452a02c6becdbc45daa868c62485d09261220de439e37df1da368e72c10864add22e071c3b06020801a486ec711800e7288aa33d9512db305877b286a66f9dfcffcb596d8918b42a4d4ba022db04f67a275432a1bc96d8151e13284e19403c4f410b1dcfd61c439ce3aef97049713041d53fdcca04e0720624c06e91eb1b2c26094c842bc231a01187f15b0dae93a779804632ce92852f55b0cd3cf4be8e517fafbd115288a40a3559c20e84f49e32bf89ea85c34cc878a5b94ba6127493621f8fb6ee20e96e944e288c109629adbe391644310f6f9e3dfc99498d6982fe5c2190b1cb6fad7666469728693aeac9bc3771b82fe2a32dcf57e5441bdeda24a144321f65aeb6c86907ced3f41927a4599a4ca7606487b58050173c9d95f5d00270ef5b88c948ddab09e8a609271d10dd84c1bdab1a73c410a32b83987fba69da6703ebbe7ce43827902681ce4af7902302fc9f02f186a0878e27278dc842d0e9ecfd05a3464c2dad4f1b448aea9c1dedb9d41540e17cc96009f8dc2db66afcdb392e679302d86d14f150a8b0add7f3b31c8fd1c042a8e27ac7f30788511c2dc6892fef88fa736b7328940d14a2d8cc77f7202e058af4aa81308f3e2bb960efc66d9e857ea2d2154babc19afaed24a1d8097c12af8de649c7392fe8d4073482217b6b219cde98c5c2a34287fdbff59e9d2000cc09c806f7173d6e42a95c418999c015b21100361775aa51c34343510d5205d4cb6b8d652ba9e33fe5614baf896ebf663d57f47e100b8fcc22a78ad5d57a9ffc74fdf7b84bc94fcd7444449ee413847c13c6b6dbbac632f9326f1c56e0d83f4df1f32bc77f3c74f28c8db08cebc5682dff65c0bf42e662368feeb24e12624b0f0aeadd29c91e8786a9b64cf301cbc0e8dc327be77ed161ad7ec89fce6be404c3d2a42914b49d6d68032e571d74f0b2e8e93e495b5d0cc7129429645613a8eede619045904c80923cbd5c2de2151bb9033dfedca6374664df88ae752b91309cad7a4f8383451c706b2f2ce60851c8e255003e71bf865b4e2a8bf6839bdcfca1c19eef2f63c71a72717e7bbc4d461e4cdd111e926d112d70ff7dc79efa744822aa9b755ec9aebc2ef6f7d6b7d7b32ce1bbc2eb54fbfa7ad26f507b8bf96dc28504984dc693bc0ca5d85a8c2a8832f70b51c7e4aa6e1f91607736af2e0d5b1b843dabf66ae4aa11ac7614104940f8240b5eb39fa9f330860a48e6a5b455e68512108d63ed763f93fd9fd425e382508352a697d432bad5d3072d8fd0d45cd1868c7d93f7a640f822fde546fe8208a8d2e7ef824e88613c44c4ef374d26e74077ed51eadac5e9e3eb33efa05d6c343f00a5f482a7dd723d9b9bd7c7a8f94bd0cff0cf431f7aa506403f400c3e197206ca5f03417c28f097366c191cdd03d9bb6d58b31643e653394e4f55b3dd12b062662b914a99629ad7f0af8085215488c53e3f7be39b123cee42bcae2b36278dc1e2e6a8293d4874155a7ec9f0e4fb59b0bda9f46b50d29ec234a9ba4458b00d1be82ea6a176e58b55604f2cd61a81c82652f8d85a8feaa2855c00a32193f0b8a71b31364fab2c8159556270b958615693fdf9d6c94005d59d14c6f0aa32543ec4a6ec4f6781e2fd82cf6020465efab9fcf07fc6a48f8c7e8424a17b71d46fb96f5602a0444ad260072a1b2f54625562e0e720d8e3ad15089eb037507ce8da11aca8a4ecb7ab9a08cf4521c3dd52ab7f968b0fb0de5fd1a790c521458e139cfa1790b7cc01bf06f87768eebe08ab0d84570b8e31a86a91dc8e059f704873fa78c96e5541f25f9e44600160e37f1733265950448c228f2aae1a692d6ddcb30369a47e427c79bf424a835221445da062b9be5d8f61f8adc18d9085c5adf5d7ed4c229313a933dc0f59fa115f34b1c7f48d09bcaacd95d0daada6c7d1cea89368c8e7723009f6ecfdfbcff55b7d6abf8d6501cac6ccacae75db3e874b5a467130158375b9bcc11e3c004f7083166b352bc20149aa859d2d149e0927a7baac71e72db0084146aa4ffdac10e59cd72aa0e2cad5f393ad96af2e7c71b4a030409da34d87eb45d4778ca1468ea9f91ef6313dc197beb8314fa422d99bcde4f6e8c1d4fc02e831a7841119a67a97f2b116636f6d80a40e4bc3a700ff1b754d35bc8bb4b5573efa107f31cccd2152f4d6bd6e5b3befb6c0401cb848822f93f10141eb4c7326ff44c633ff02674ab641f415d5fed339944e859bf365498ac2932e83771369831d61d0de209d59c4fd9ee28af9b0a8b97a4729ec1a3049a749671212c37856f3344ef466f86ab19d554757effc1b2e0726ed13a50929ec3d8ba487b4924d4f47e872ef0af5228a35bc513c3f41cae1d22c69240c94bcff34f82bc76f1c4346aa30ef4bfc83b969fe58537ed52e390d80a8e09cd695f182081088bd6a1b5989e5062ae259c23088d2d4245a89a2f4364b80c20f147d613f5a5499a3504b6f0167840e20b232a2a4a8fbed2b", 0x1000}, {&(0x7f0000002d00)="d1ec82afd636118f9ecb1c136486851cdfc3824452969507072936a5a29712ed959d7716debe94396b7e58a271bf988007e493a378ecb6c018c75156cf53ec6ae3fe36af232605a6922d6cfbcf07b1d01563f0604f45a2ecdcb179809cda90fb6a74124e093b6ffd2c5e636de65685717a170fbc3a888b5e904b", 0x7a}, {&(0x7f0000002d80)="2a45ead2a738c1708490a7851bcbc3240af266bfac49a367d3e853ac3f5fd00227174b0bacd6496a9dcb83b310fb6a46132c8ded74e6d69d011cedb611932ddc8f63a94c0354fd841cd6306030d027fb113ef72180b0b2d689d490c078648ef27df8805a54abd3d791ce9e6e0f1e2e6bcbb9b778ab053d842d517db1afdd6b04d87b0d704b1209ab4ec7d1abcb50b69a9c3c102bd92ec8592533bd9f8367f43e04684ff2d35630da01c41279bcca67e53f3a607581e34b8e6a60dbc814777699a2fc5917c69cc4f21c0e905ce5ac473e9027e86ccc30dd343440ab212a1f1e1133771e51b971", 0xe6}, {&(0x7f0000002e80)="45a10752ffae3d278e4653a86f22cd3a083c1e7e533a2b55b1c06031d750d8f2d10d8d243c096ed176b910d1ebfff56f86f8f13b5cbfd8fa09c69f54facf3f5a3831de6fd28d54793b80ce280da7278b3b2547b0afdef43fc4d54767bb0fc3b83265940079a63fa008b99c815149647d8688ceb6782816f82d6cff486dc458e0b2c0ce4c1ceb4384ca47c842c69bdeccb359d32b615a6eac969a8aa5152a4918ea51b1a9dba5db201bc2b7a13a5e052f0830cf041fcf8cc8d64991d3b9ca9fee17b5c6b00b255f595df234f9fd39899d324ce54ee024f0873471acf543f2600ccc9f351dad1ac6e411fec09cd5bd7725bfb23958d3d8", 0xf6}, {&(0x7f0000002f80)="f9d5ee7b061345c4de76", 0xa}, {&(0x7f0000002fc0)="a4964f57e2d3fec4d2bafe4ccb3ef7a1464f1524e4cabf4de1627473ba7721c4f9c3d5b9a5f4d44f3c8eb3e9d5de7a0b5d5a3c5ab746800f25fa1519255e362cc78aca1f2a90b54a14e24715e358ef6f67e475a5f5e17616e297886783ab1d96347ab13eec5724f6984f16c2b09d2d5fd1848ada60d542c2cdf5240ba399799c32095e", 0x83}], 0x7, &(0x7f0000003100)=ANY=[@ANYBLOB="94000000000000000000000007000000443ce703ac1414aa00000060ac1e010100000006ac14140e7fffffffffffffff000000036401010115ebc932ac1414bb8323c8e0000001ac1e0101ac14143aac1414bbffffffff0a010100ffffffffac1e000101441c7e43ac1414aa000007ffac1414bb000015c1ac141425000000068307d8ffffffff00"/152], 0x98}}], 0x4, 0x40)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f00000032c0)={0x7, 'netdevsim0\x00', {0x3}, 0x8000})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x3d, 0x107, 0x8003, 0x8, {0x3, 0x7c}, [@nested={0x14, 0x11, 0x0, 0x1, [@typed={0xd, 0x8, 0x0, 0x0, @str='}(/-$-^*\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0xc000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r1, 0x300, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x800099}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)

818.249797ms ago: executing program 4 (id=6242):
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=""/23, &(0x7f0000000040)=0x17) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r0=>0x0})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r2=>0x0}, 0x8) (async, rerun: 32)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x3, 0x2b, &(0x7f0000000440)=""/43, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x3, 0x1ff, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x2, 0x5, 0x6}, {0x2, 0x2, 0x10, 0xa}, {0x3, 0x3, 0xa, 0x5}, {0x5, 0x5, 0xa, 0x9}, {0x0, 0x4, 0xa, 0xd}, {0x3, 0x3, 0x10}, {0x5, 0x5, 0x4, 0x6}, {0x4, 0x5, 0x9}, {0x5, 0x4, 0xd, 0x6}, {0x4, 0x5, 0xc, 0x6}], 0x10, 0x6}, 0x94) (rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-5lx  \x00'}, 0x20) (async, rerun: 32)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x0, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x1, '\x00', r0, @sk_lookup=0x24, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x2, 0x7}, 0x10, r2, r3, 0x0, &(0x7f0000000800)=[r4, r5], 0x0, 0x10, 0x6}, 0x94) (async, rerun: 64)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000940)=0x14) (rerun: 64)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000980)=0x8001, 0x4) (async, rerun: 64)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000009c0)={0x8, 0xcb}) (async, rerun: 64)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1a4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xf}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x31}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'GPL\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffc00}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PACKETS={0xc}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (async)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c80)={r3, r0, 0x25, 0x19, @void}, 0x10) (async)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000cc0)=0x1)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00))
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d40)={@private1, @loopback, 0xe, 0xe}})
ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000dc0)={0x0, 0xfa, ""/250}) (async)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
getsockopt$inet_buf(r9, 0x0, 0x2f, &(0x7f0000000f00)=""/201, &(0x7f0000001000)=0xc9)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x0, &(0x7f0000001040)="d025ec3c20beabacb45f83a7fc234a5f4596b350b3dbcc7bddd952ee23c37c27986863eb57928424711c06e079d5dad8b94a719c55c5bcb33c928c032a67ad6344d554f3afb9e022d6d2b9c25f7df20d331322ddbc404f52a84139e1ec6d9f1362543aaa7813601569f83117cab28b76120a053450e6bd8081357de43617ba0ab299114e338e7a9255cf0933e50a791b30550b000808fce1f19416e058d29604e414b74feb49519e25a23782c43a78517929695db6ebdde3c965763a386dfe08d8b7e5d969416b0758c4d920afc9ee0302f75218d069b74af28377eaadaea4c2bcfd4447474a3e8acf52cc87fc1038a7e94964950f5d5687e7e7aa94d5939e04cc33c11e6ebab71ddb50bfe4e9aa60edc6ff3f638340c35a24fc63d8339d0cc64d759bd3c3a5182356e3f31ed38ed0689a5e0cc2f51d827147929bf3d0e50c5608d6ac977705c419f5f82e237b64333ec00481b2247c47dfbb410897897cb8fecb5b71c5d0ea4970b6fd80c4d18d4a62eaf59f3d1454bc516eaa6b351e68d79704b0792e06972a03b0a21034c7d091a17bd963063edc354df7029967574fc8a6ddb4494888ebeb3402aa4d22ac7c65c0d63e75afd845186927223a00d1e62fa7bde8fa739b184b66b6275d25a70c3d85e2cd7ac949f3d13b9fa3c2e5de4b75ec3034b1c2bf4e6d0974dd6d72c68d8d09b04e087ddf9147d94c77afa2618c6b11de0b7701d75573d4bcd2bea0057dbc34abe01fd6edb7afb192aee04b6080100e241433be537a937e350f48d63190064a9f01482aee5f160e990f6ebd2ee5675b45175685bf689053628298b84339776aeb22184bcf54b05254d130c6292dcf0464ad41a171d029fc3f3fe905bad4dcfe947eac24a09c65274a08eba3884db5e2cb4ee1f6d099792e6d758ae40af84191e1764ccff4c34a66963da63a9b7434d677cfcd13c01efe0c1fb0c5f8e5495cfbbaff910588d83d93753c8b39904b90c81510e9eec2385a8261593905b35c5c41b1c21d4a595999cd9c330b943c6116ef1ff31cae58c485260ba9d7a8f05766a6423b34bacabb305e9e8abdc5455c92721e689ef3c630306c7b84f974dddadee53a47692decb5383c39330cf60e048595eb90ba891759bf08766ccf8f154e831206762c03270bc58502adfaf584d653c348e3488f742deae66065976acd678c50a4aaad65e216ef773b0c176d4ce23d439dac40860687718ca314b61971891b9603a410c5e1352a4df8a2171da2c69a2973305170cab8c0bb0a3d27be3158b64f41d711d614530ac0c009695ac9164e49678e0dc4d4b9dd3f5ec460219fceb2f5daf882f19007fdba4e27474e759e4827572cc462efd248f391f5015cc7daae7abdb44efe437f89c92ccc8e576e8bf361f22af123e2835d496fac68d265ce0391c983fa5a8a8d117d29a4102ef7b8fd435a8b84bda5b5f03208ebad6941aa1d68b093177639de99588eb685ca5b0c819bcd35bb0546381bee649758b4024b8a6863665a037de8955fab3851adda8b3bb347b838eb51951439626f1fc08212df031151602721bb06365d1007f8f738786a5c1cac84bb55eaac4af9ad1deb0916e924bd832d3eb539033b8360169981983faa3762633f74b3605d407849ada9113a2abb5a40cfe1c759ca79fa56a398b4fc67975cd03ea5a66c4258c1ac944180396b80dadd18840b32118f8b894f6fd216a21c99f4c1b9033cf9372c0222519cdca6035064ff54f992fb7c9889aa7cbd79c99eab1f97bcadf73eb7b09950b01cd5d73ffae6e62ce9f38716e7034799a57a619697ba79899a302dee9df67854b4b843ec900c95e249656e94253db5d27232799982d9af9460fbb1c8bc3827b74e325eeb80155edf05b722702b9515193ba95c7f14b2c7030fa00882e1410441317def7c7203a782f4b2c42035651d1484fd6baf442758522882ba5784e5d3d51db3b2c549983af39224df57f0bc21709e0279de479a87febdaf6f0a1375651d949fb6d73a8a6e04fab60d5835fd20006c5a1d734bcf6db9c727be61e3c8bd30e858a714fd3ee62e1ce1795ac60e8fd1841ee6ab07e1648a11af46c8a8fc136a06d6bbb2e17b29eb07fbdf1155cfc8bd7a100df8731b1dbf0f04d0233bcae261ccfe51da74c072a17c6e00a7127aaf9ef98464e503ce9fc36b48b8e73886d2fa8e8073e48727c27744e958753c1295c07c0be4074f80dfded5da5b6ff0ec18644d2fe7c897c558385d8dc83f202ac31b18415d500e6298bc2975638a43906319ab052d57da9f40d880384519b1d8fa02858b09733918b997b4fc9e728a770f3a7d349183267e05f1aab7394022dff15471ebe96ecb90d155e2f6bc370bf307acd90169d4e2c4831c5d69e8c1b8ed01a1d1db57efc38c20833e5d262d18b80fff047eab7d9a6d8a74f02437c65ada00369b44755399b894d1da67db2677b117a6bba8dc69d945969e8e4c33a7df427eacaab00d1d1620efdd4b643c585b0279daf7a5cc683843fce418da7dcb79de62965e3496adaab365190dbfc7c254a6bc30d865043ec21c53abf67dd7437088f5a511309c0dd849e0c5b33e2185775f63319d220f356c4ed4d871d157f4f99b69d6de16ce92e82f8106309c4579d970dbe0f0f0805737f58e82afb08c4a8e8a2a09930c9cc4115329db09ae27e3102a2daebbc8789980cffa03fd2391c3b04049816cf7ce145cd51266ed5c7ff57849974087d0d66983296fd60c0466e7cd210c435636817e86a9c793bd65ecc903bd2f321fc158caf36a0e1436027d5c9235cc93fd702ef0a4f3c0b3f7ab7bbcab2db01ee94d0abeecd3ac26f5babfcbe29822b6a9358724046143544dfe57461d4460124b608848a88525ea9358bc71567b03e63414181737a6fdc30cd63c6093370f4bef054894ec91e182fb86198ed0e378404fbf110b1f26a7645b3c45804084f2fb7bcce37d880134e7c1934f7654401cde42aa1a8351890de4dc41f592bedbfd36d52ff043535ad0fe74304457f4890fd46454d58426d7b9facb6897c4d16185b98907f124ebd3ca6ec4612464f5a5eaa9b99fd0c71a5faed0de599381afc8a496b153c066d9b50e70f4b59c9f203c64b081e521e5cc1be5994b708fa978313ab748838d5b1ec78248cb037f9da2fdc0b4be283491e2ac02c311d47507d4a16f4ac88ef3556eaae56a6a30eb9d9c9d822109d3bbd54fbd298e1db1f1cbbeea45fcb8120969e8887ea1be35bf10341ee632eea34f4bd5c8096347ba85d529657b0864e092b385c21aeee8439c973b936daa8f6458e24d8062bce9d6ad903fe88a33e82c29eb51b6c535b08ee324c2be309dac89eafa9d78df804cfdecab79ce1b14830e1253c74d6e25bf590c6f7121715b6a6bdd9bf7b874debd3cf398feb0bae83a689397a07982af78a2ab084dc60696ea2514ca6dcc997eace5e69cc359d688ccc9d53c15ee381fa2354e8c1d199e83ad80e6a8955bbb3e0c392e7510fb1c55a0023d58da5b9e9549d8bb1e34a33acec4e4489faf47a28cf7f3e68fc8cfab7b7d36c2b561ddb000e6a29725481d23dc4297a24f2a8111d2c7e92664e733dd0af2e03d3effbf9336928399bfecca2d9b3239919013b01b3c07aaffc2cd635005f3466d42b6e4dc3f66c516170bf6f8787893d037a64575119964ff47c4ecb257f89a2344b6f9a75876a9a29029629e336870502d4c950b123307d4006923d17bfd35d29280c36273d8096f42267cb44f299c254af9c4117afbfbba9fa6806c6060b300c92cd83a6f65d6cac47c76f009a74b74b3be47dddeecbe23ec8c40c28263cea29dcba2b45b12fc5b3bdce0371833e74c26c622d3146197c80d671a5073b29dc439036659306f509122fe1fd081aa7686632f945569fde19d8c7fb95cc3d6b508347279b666ee1b57db34b279651b4dfedc140fad8e597a2447edecb4d52f02fd7c0539f10687638946a14be35fef13c6095ae558dfa6222d12f02782761ebf95af5796f9e73f8648a1bf8e180e2e27d850efb8a8ed13dbcdeab97a41c1076be83fe28bb0df4285029be5470ebc2ab46f7202df87c40a6874617a6e5f574672d939b5ca36c948f318091e4f55bf1f4d80a85b8926aa2d5ede98a8a184192fbb4faa0c14b3fabe9892f533132bfcc5b9964d4a8f94244612660aac06aad936d036c569837d8e6ccfe2e6aabcdd6f0c4dc84015ab220158ffa7d40af8f4ba26453a14743447926e6d06392ed975badf8f38bbf27744166c62e98fd2b8070ae93d0d27dcb243ce0ca9eaea53865046e8eb7f76000cf8624bd5b71b340b3b462ef08914cb4c2f50c4a70641618c70615616aa93d7c178fe40b6d89942bda184612d6ba064f97aa2b7614061b52af6465a665e44f7fa22f0da251510716b099645f1dc392da0b88e8fab001508dd578358aabb13c0f45e77c868eae9cfc251009c67f36e3196161a48a327612ca8099290d703edead0073d7448b5e56d6f5548068d90378c37c88c704476ea8fa01afdad00f3f6f081264d5ebedf57e2e66b2396e8fe4d46f1e70bcde8a28f6c4b3a134987fe835a7596b09641d04c097b38dba4dfe04803781efa0ac741ce51be471d564c9034d986ae438e280dadba9b3ad66edf5965942de7a9ec36276606c3c2af555ef1cc6fba902f8c2f95762a1508b3148b884b18b5680b5ea71094fb6b246e2e7b174f369f6190e78db46e5cb1ff22ff1a50aef931f2e74fd1d9d7b8133f4bfae8909b35ba62788454edbf1b12edccfc639bd1bead60100b320149c3ebd025e343cdf149db2e1209b3f2ee02bdb386855526c14cb2fae5da51ae8b35b222411363714e538a75bc3c76b61788ae1e285226865a83e3b746c3bce97574867d8370dedd80ef3425dc683e2f3064d0622169953fd582a06168d2605ac49ef0a296d8055a002cceb6f17342491dfecca2808523c0b44e913edfa3ae4aef9c5e3b572825873bd12a234b59e960ea70d6d877d9a6f79c498c806ddb211e41c1e697ff8f052da3f429512ebc5341d36cb09cf8808c245a50ec48fdff6f153f3308851500ddcc9ef63ab6c00a067c1a8cf0264bb4688f8c847e31cffeeec7e348d26cdfb238d642263e475f4a3861ab8fc01d2889070f6d4e79886f216e3f40456b59d6b77cda9bdeb710ace5c34d3655fe32ff166d57993e782bf3b90ff5537a721f099d30e9fe82c4b03a9cb3ebf149d636846e7f03d547ce2c2d1e7cd86b417ff4798fb16a7e54a6d3926cd9cd5be07e1cc3744d180b20a8c3b5886853380dbb53bacb25a900c9e0172ad0bc492987f0f03ffecb748c9643e9ff949aa375c6085e33578810aa8555ceb3275994b75ef1a741e4b85c14739ab79490cfd3f08b8ad38578cc9de71e6fd9de2bbb7800282c0a2ee88d527495db341f165fe3ad1fa6c4e67f7e0f7fd0e69cde3ed0bb1fbb6ce329f4e025d0171535c1884cd4cdd9d40e7d98449d681233c2c0f80c9b817e83a8dabf0b9d6a6f0ee73496719e686f526f73877ad47e28dfa9149eb7e569564e1e6e6240c8f25146c26f53f65749a2796d607a2ebd8e389f0913806e7e51047a951e23eddee22f74acff0c758aa3048822306cff1b3990a946b0820c3cf37e2f4cf1dd2a83292cb5b7dec46d239047b1a30007423e61e74fbacc697a5756f5c042d910f2e6f5b2c4c6f17c7f487fdcaa3103a26f19c7160cff25754bb12b24e430b059dee3948d3d9b927011cf083ddc75171fc2384c4899771fd2bfff38c0edac3d1bb8a21f877fd8ac3f858017f0cac2e23442")
r11 = accept4$x25(0xffffffffffffffff, &(0x7f0000002040), &(0x7f0000002080)=0x12, 0x800)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f00000020c0)={0x2, 'gretap0\x00', {0xfff}, 0x4})

739.898282ms ago: executing program 4 (id=6243):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x7}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000a80), &(0x7f0000000180)=0x8)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r9, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000018005d8b010000000000fedbdfa50200001000ff050000000006001500020000000c00168008000600030000fdc9cdfe06c9b638281ad569731afccb64"], 0x30}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={<r11=>r2, @in6={{0xa, 0x4e21, 0x8a, @remote, 0xffff1268}}, [0x101, 0x5, 0x3, 0x4, 0x9, 0x8, 0x0, 0xe07d, 0x100000000, 0x5, 0x3, 0xfffffffffffffffc, 0x5, 0x5, 0x4]}, &(0x7f0000000080)=0x100)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90)
close(0x4)

550.049924ms ago: executing program 4 (id=6244):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000800"/56], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000100)=0x8, 0x4)
sendto$unix(r1, &(0x7f00000004c0)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f308129f06b9681737bee9b25e1cab92da9d492c444bb783cb912f54da49fea052c04ac91a172951b2102c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200"/126, 0xfffffd56, 0x180d4, 0x0, 0x0)

249.986924ms ago: executing program 4 (id=6245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000a6c0), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f000000a7c0)={&(0x7f000000a680)={0x10, 0x0, 0x4000000, 0x400000}, 0xc, &(0x7f000000a780)={&(0x7f000000a700)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x800)

249.452527ms ago: executing program 4 (id=6246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r8, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
socket$netlink(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040))
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r11 = accept(r10, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0)
recvmsg(r11, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

148.717524ms ago: executing program 3 (id=6247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001800010003000000000000000214b408ff01fe020000000006001500020000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1ffffffffffffe42}}, 0x40)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0x1, 0x2, 0x10, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0x101, 0x100}})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r7, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000ac0)=@getchain={0x2c, 0x66, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0xf, 0xc}, {0xffff, 0x9}}, [{0x8, 0xb, 0xb}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r11], 0x24}}, 0x0)
socket(0x22, 0x80000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
accept(r12, 0x0, 0x0)

48.525636ms ago: executing program 0 (id=6248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="056ed9591cf2f4de7a1c745289f1829aa1d908892aa98e2422121188345930b00dbc107df4c36238c42f071efc45b93d73f9e3fd65be0ddd4a259697666a562474e7d91e030642c58a2750bba32ba30c04fcf77bf16801a7f3e28814856357", @ANYRES16=r5, @ANYBLOB="000429bd7000fbdbdf250200000008000300030000003000018008000300e0000001060001000a000000060005004e24000014000400000000000000000000000000000000010800040000fc0100"], 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x40000)
accept4(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "edc70c9e1c6fe7f7cba38d3310746f9c9bd83b4b1d158540ba87a12cbaeefed3", "4c4adc747c39b32b6e2cbe95aed012fc63031ea83fa8112c320f07807aaddb95", "ef6e9a18eee565740386e14248f13787b566fc8f3ca6a32b586b52df861b3a07", "99631701b28e23df27a356d1f6ec99d958130ba9e4644d53da42ec3a525712d0", "04d32c579fb9a67470591926aa759fec68e9c3b7f25d1f3c37b867bd753cc198", "714f8e5eac579146ee61d1bc", 0xc595, 0x7fff, 0x200, 0x1ff, 0x6b2c}})
connect$inet(r6, &(0x7f00000004c0)={0x2, 0x4e21, @private=0xa010100}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0x400, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

0s ago: executing program 0 (id=6249):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000006c0)}, 0x20)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={<r1=>0x0, @empty, @local}, &(0x7f0000000940)=0xc)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x7, [@float={0x10, 0x0, 0x0, 0x10, 0x8}, @struct={0x9, 0x5, 0x0, 0x4, 0x0, 0x3, [{0x9, 0x5, 0x9}, {0x0, 0x5, 0xb}, {0xf, 0x2, 0x8}, {0xe, 0x5, 0x1a}, {0xc, 0x0, 0x5}]}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x80}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x18, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000a40)=""/118, 0xa7, 0x76, 0x0, 0xf4c7}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00'}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0xffffffffffffffff, 0x7, 0x10}, 0xc)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x7, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000840)='GPL\x00', 0x6, 0x7d, &(0x7f0000000880)=""/125, 0x40f00, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000b00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x8, 0x7, 0xfffffffd}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000d40)=[r3, r4, r5, r6, r7, r8, 0x1], &(0x7f0000000d80)=[{0x0, 0x5, 0xd, 0x5}, {0x1, 0x2, 0x10, 0xb}, {0x4, 0x1, 0xa, 0xe}, {0x3, 0x3, 0xd, 0xa}, {0x0, 0x1, 0x0, 0x6}, {0x3, 0x4, 0x2, 0xb}, {0x2, 0x2, 0x1, 0xc}], 0x10, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffe78}, 0x1, 0x0, 0x0, 0x14090}, 0x24008090)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x673055034300c0a3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff14}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r10, 0x0, 0x80000000000}, 0x18)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg(r12, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041)
ioctl$SIOCNRDECOBS(r12, 0x89e2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r11, 0x5, 0x14, 0x0, &(0x7f0000000100)="e72a1cf9b1625c953c6916075220840000004925", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1100}, 0x50)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r13, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r14, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x27, 0x0, 0x0, &(0x7f0000000700)=""/176, 0xb0}}], 0x40000000000012f, 0x0, 0x0)

kernel console output (not intermixed with test programs):

00] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.587262][T14737] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.853457][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3558'.
[  215.246147][T14793] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  215.254593][T14793] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3569'.
[  216.105729][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'.
[  216.117293][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'.
[  216.663612][T14864] IPVS: Error connecting to the multicast addr
[  216.780466][T14871] bond8: entered promiscuous mode
[  216.787853][T14871] 8021q: adding VLAN 0 to HW filter on device bond8
[  216.824278][T14875] netlink: 'syz.1.3598': attribute type 1 has an invalid length.
[  216.845206][T14875] 8021q: adding VLAN 0 to HW filter on device bond9
[  216.853635][T14876] 8021q: adding VLAN 0 to HW filter on device batadv1
[  216.861934][T14876] bond9: (slave batadv1): making interface the new active one
[  216.865258][T14876] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  219.817851][T14898] netlink: 'syz.0.3604': attribute type 1 has an invalid length.
[  219.888402][T14904] netlink: 'syz.0.3606': attribute type 22 has an invalid length.
[  219.892447][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'.
[  219.907202][T14904] netlink: 'syz.0.3606': attribute type 22 has an invalid length.
[  219.910752][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'.
[  219.915457][T12763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.921156][T12763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.924317][T12763] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.930136][T12763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.125976][T14917] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3611'.
[  220.179811][T14921] netlink: 'syz.1.3613': attribute type 5 has an invalid length.
[  220.345856][T14935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3618'.
[  220.354967][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3618'.
[  220.515433][T14951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3624'.
[  220.525182][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.530715][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.537638][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.546214][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.616997][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3628'.
[  220.705886][T14972] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.728129][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'.
[  220.754257][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'.
[  220.890166][T14986] netlink: 'syz.0.3638': attribute type 3 has an invalid length.
[  221.053991][T15000] netlink: 'syz.0.3641': attribute type 9 has an invalid length.
[  221.080324][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3641'.
[  221.476165][T15028] netlink: 'syz.0.3652': attribute type 9 has an invalid length.
[  221.929266][T15063] netlink: 'syz.1.3660': attribute type 1 has an invalid length.
[  221.934053][T15063] netlink: 'syz.1.3660': attribute type 2 has an invalid length.
[  221.984763][T15062] netlink: 'syz.0.3663': attribute type 2 has an invalid length.
[  222.611215][T15132] ieee802154 phy0 wpan0: encryption failed: -22
[  223.131202][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.134938][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.138348][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.141395][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.144428][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.148751][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.152052][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.155015][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.292042][T15188] tipc: MTU too low for tipc bearer
[  223.469255][T15201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.475935][T15201] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[  223.493680][T15202] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[  223.512869][T15201] tipc: Resetting bearer <eth:syzkaller0>
[  223.569498][T15211] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  223.798017][T15226] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  223.863422][T15229] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  224.482271][T15281] geneve4: entered promiscuous mode
[  224.485147][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.489634][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.493209][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.497070][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.680597][T15279] wg1 speed is unknown, defaulting to 1000
[  224.797989][T15287] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  224.936387][T15294] __nla_validate_parse: 48 callbacks suppressed
[  224.936405][T15294] netlink: 14679 bytes leftover after parsing attributes in process `syz.1.3745'.
[  225.102530][T15299] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  225.180094][T15305] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[  225.183836][T15305] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  225.263792][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'.
[  225.282847][T15308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.320510][T15309] vlan2 (unregistering): left allmulticast mode
[  225.322909][T15309] bridge0 (unregistering): left allmulticast mode
[  225.325153][T15309] vlan2 (unregistering): left promiscuous mode
[  225.327578][T15309] bridge0 (unregistering): left promiscuous mode
[  225.330086][T15309] bridge1: port 1(vlan2) entered disabled state
[  225.390482][T15310] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  225.398794][T15308] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  225.402744][T15308] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  225.463198][T15317] batadv_slave_0: entered promiscuous mode
[  225.468403][T15316] bridge_slave_0: left promiscuous mode
[  225.471462][T15316] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.472248][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3752'.
[  225.481817][T15316] bridge_slave_1: left allmulticast mode
[  225.483799][T15316] bridge_slave_1: left promiscuous mode
[  225.485899][T15316] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.502327][T15316] team0: Port device team_slave_0 removed
[  225.512058][T15316] team0: Port device team_slave_1 removed
[  225.515490][T15316] batman_adv: batadv0: Removing interface: virt_wifi0
[  225.520178][T15316] batman_adv: batadv0: Removing interface: vxlan0
[  225.524256][T15316] bond3: (slave veth3): Releasing active interface
[  225.529567][T15316] bond4: (slave gretap1): Releasing active interface
[  225.531851][T15316] bond4: (slave gretap1): the permanent HWaddr of slave - 96:7c:04:76:d4:1f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  225.537972][T15316] bond4: (slave gretap2): making interface the new active one
[  225.542472][T15316] bond4: (slave gretap2): Releasing active interface
[  225.546449][T15317] batadv_slave_0: left promiscuous mode
[  225.569631][T15319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  225.643768][T15319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  225.699190][T15331] netlink: 'syz.2.3757': attribute type 11 has an invalid length.
[  225.704805][T15319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  225.755902][T15319] bond0: (slave netdevsim0): Releasing backup interface
[  225.762094][T15319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  225.832191][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  225.844798][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  225.863097][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  225.885455][T12763] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  226.432177][T15351] syzkaller0: entered promiscuous mode
[  226.434333][T15351] syzkaller0: entered allmulticast mode
[  226.509720][T15353] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3764'.
[  226.690185][T15355] syzkaller1: tun_chr_ioctl cmd 2148553947
[  226.700115][T15355] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3766'.
[  226.774939][T15349] wg1 speed is unknown, defaulting to 1000
[  226.871405][T15357] syzkaller1: entered promiscuous mode
[  226.874437][T15357] syzkaller1: entered allmulticast mode
[  226.980499][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'.
[  227.095639][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'.
[  227.103596][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'.
[  227.157405][T15377] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.181795][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3770'.
[  227.502211][T15388] wg1 speed is unknown, defaulting to 1000
[  227.520546][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 60 seconds
[  227.525025][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 60 seconds
[  227.530426][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 60 seconds
[  227.534381][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 60 seconds
[  228.180313][T15439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3791'.
[  228.340827][T15451] netlink: 'syz.1.3795': attribute type 11 has an invalid length.
[  228.424910][T15441] wg1 speed is unknown, defaulting to 1000
[  228.535789][T15464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.545355][T15464] syzkaller0: entered promiscuous mode
[  228.554504][T15464] syzkaller0: entered allmulticast mode
[  228.583768][T15463] tipc: Resetting bearer <eth:syzkaller0>
[  228.627150][T15463] tipc: Disabling bearer <eth:syzkaller0>
[  228.628635][T15469] validate_nla: 2 callbacks suppressed
[  228.628669][T15469] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  228.634246][T15469] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  228.639990][T15469] netlink: 'syz.2.3802': attribute type 2 has an invalid length.
[  228.645054][T15442] wg1 speed is unknown, defaulting to 1000
[  228.755589][T15477] lo: MTU too low for tipc bearer
[  228.767009][T15477] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  229.268097][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  230.148989][T15515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.254693][T15536] __nla_validate_parse: 5 callbacks suppressed
[  230.254712][T15536] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.3821'.
[  230.780591][T15569] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  230.783593][T15569] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3832'.
[  230.794008][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3832'.
[  231.036500][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'.
[  231.290794][T15608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.408508][T15614] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.500811][T15608] wg1 speed is unknown, defaulting to 1000
[  231.501319][T15629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3853'.
[  231.618277][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'.
[  231.627239][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'.
[  231.791057][T15646] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3860'.
[  231.811868][T15646] team0: Mode "broadcas" not found
[  231.814543][T15649] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  232.305879][T15685] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  232.311238][T15685] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  232.584633][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3882'.
[  232.588794][T15709] netlink: 'syz.0.3882': attribute type 5 has an invalid length.
[  232.592488][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'.
[  232.604307][T15709] geneve5: entered promiscuous mode
[  232.607830][T15709] geneve5: entered allmulticast mode
[  232.612071][ T5707] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  232.615589][ T5707] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  232.624777][ T5707] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  232.630517][ T5707] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  232.951971][T15744] syzkaller1: entered promiscuous mode
[  232.954411][T15744] syzkaller1: entered allmulticast mode
[  233.219563][T15756] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  233.267824][T15747] wg1 speed is unknown, defaulting to 1000
[  233.269148][T15768] nbd: nbd0 already in use
[  234.237573][T15826] wg1: left promiscuous mode
[  234.239377][T15826] wg1: left allmulticast mode
[  234.265978][T15826] tipc: Resetting bearer <eth:syzkaller0>
[  234.273794][T15826] syzkaller0: left promiscuous mode
[  234.276546][T15826] syzkaller0: left allmulticast mode
[  234.290053][ T5707] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.294148][ T5707] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.326274][ T5707] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.332211][ T5707] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.459194][T15841] netlink: 'syz.1.3921': attribute type 9 has an invalid length.
[  234.499455][T15846] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  234.502048][T15846] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  234.580942][T15853] netlink: 'syz.0.3925': attribute type 1 has an invalid length.
[  234.586605][T15856] netlink: 'syz.1.3926': attribute type 1 has an invalid length.
[  234.600388][T15853] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.671822][T15865] IPVS: rr: FWM 3 0x00000003 - no destination available
[  235.151578][T15898] netlink: 'syz.0.3942': attribute type 5 has an invalid length.
[  235.317680][T15920] __nla_validate_parse: 15 callbacks suppressed
[  235.317696][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3946'.
[  235.324119][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3946'.
[  235.436940][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'.
[  235.944024][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'.
[  235.950150][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'.
[  238.251961][T15953] netlink: 'syz.1.3951': attribute type 11 has an invalid length.
[  238.431807][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3957'.
[  238.440779][T15965] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3957'.
[  238.947552][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3967'.
[  239.195002][T16013] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3973'.
[  239.453871][T16029] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3980'.
[  239.457622][T16029] netlink: zone id is out of range
[  239.460572][T16029] netlink: zone id is out of range
[  239.462811][T16029] netlink: zone id is out of range
[  239.465036][T16029] netlink: zone id is out of range
[  239.472770][T16029] netlink: get zone limit has 8 unknown bytes
[  239.532998][T16033] tc_dump_action: action bad kind
[  239.782454][T16052] netlink: 'syz.0.3990': attribute type 5 has an invalid length.
[  239.788563][T16052] netlink: 'syz.0.3990': attribute type 4 has an invalid length.
[  239.812027][T16052] netlink: 'syz.0.3990': attribute type 5 has an invalid length.
[  239.984212][T16050] wg1 speed is unknown, defaulting to 1000
[  239.991726][T16064] netlink: 'syz.0.3992': attribute type 4 has an invalid length.
[  240.213159][T16078] syzkaller0: entered allmulticast mode
[  240.414273][T16078] syzkaller0: left allmulticast mode
[  240.475078][T16096] __nla_validate_parse: 4 callbacks suppressed
[  240.475093][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'.
[  240.525256][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'.
[  240.725053][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4001'.
[  240.996181][T16109] wg1 speed is unknown, defaulting to 1000
[  241.102833][T16125] netlink: 556 bytes leftover after parsing attributes in process `syz.1.4005'.
[  242.085218][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'.
[  242.091492][T16153] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4011'.
[  242.212625][T16166] netlink: 'syz.1.4017': attribute type 1 has an invalid length.
[  242.219047][T16166] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  242.355361][T16182] netlink: 'syz.0.4022': attribute type 5 has an invalid length.
[  242.458223][T16193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4027'.
[  242.552329][T16206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4031'.
[  242.714054][T16216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4035'.
[  242.819256][T16227] sctp: [Deprecated]: syz.0.4038 (pid 16227) Use of int in max_burst socket option deprecated.
[  242.819256][T16227] Use struct sctp_assoc_value instead
[  243.063508][T16241] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  243.232910][T16252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4048'.
[  243.315676][T16254] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  243.434429][T16263] nbd: nbd0 already in use
[  243.445681][T16263] nbd: nbd0 already in use
[  244.068014][T16310] syzkaller0: entered allmulticast mode
[  244.164021][T16310] syzkaller0: left allmulticast mode
[  244.634410][T16354] wg1 speed is unknown, defaulting to 1000
[  244.724761][T16360] macsec0: entered promiscuous mode
[  244.729170][T16360] batadv0: entered promiscuous mode
[  244.733070][T16360] batadv0: left promiscuous mode
[  244.865033][T16367] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  244.872137][T16367] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  244.874777][T16367] netlink: 'syz.0.4082': attribute type 2 has an invalid length.
[  244.878801][T16367] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  244.881378][T16367] netlink: 'syz.0.4082': attribute type 2 has an invalid length.
[  244.889669][T16367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.892578][T16367] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  244.895251][T16367] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  244.902415][T16367] tipc: Resetting bearer <eth:syzkaller0>
[  244.935375][T16372] netlink: 'syz.0.4083': attribute type 1 has an invalid length.
[  245.038412][T16379] netlink: 'syz.2.4085': attribute type 83 has an invalid length.
[  245.385094][T16401] netlink: 'syz.2.4093': attribute type 3 has an invalid length.
[  245.403410][T16401] netlink: 'syz.2.4093': attribute type 5 has an invalid length.
[  245.992992][T16422] bond0: (slave bond_slave_0): Releasing backup interface
[  246.000659][T16422] team0: Port device team_slave_0 removed
[  246.005225][T16422] team0: Port device team_slave_1 removed
[  246.008208][T16422] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.011584][T16422] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.014617][T16422] batman_adv: batadv0: Removing interface: gretap3
[  246.019572][T16422] bond2: (slave veth3): Releasing active interface
[  246.025385][T16422] team0: Port device bond3 removed
[  246.028358][T16422] bond4: (slave ip6erspan0): Releasing active interface
[  246.034520][T16422] team0: Port device bridge4 removed
[  246.038179][T16422] bond6: (slave geneve4): Releasing active interface
[  246.041331][T16423] netlink: 'syz.1.4102': attribute type 10 has an invalid length.
[  246.044992][T16423] __nla_validate_parse: 33 callbacks suppressed
[  246.045007][T16423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4102'.
[  246.056322][T16422] bond9: (slave batadv1): Releasing active interface
[  246.072283][T16423] batman_adv: batadv0: Adding interface: virt_wifi0
[  246.076839][T16423] batman_adv: batadv0: Interface activated: virt_wifi0
[  246.084183][ T5909] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  246.100113][ T5909] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  246.103768][ T5909] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  246.107763][ T5909] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  246.168952][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4106'.
[  246.224654][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'.
[  246.229320][T16438] netlink: 'syz.2.4109': attribute type 1 has an invalid length.
[  246.515111][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4111'.
[  246.520553][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'.
[  246.631374][T16449] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4114'.
[  246.635389][T16449] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4114'.
[  246.683713][T16451] syzkaller0: entered allmulticast mode
[  246.778223][T16451] syzkaller0: left allmulticast mode
[  246.805000][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'.
[  246.811194][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'.
[  246.815248][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'.
[  246.974527][T16476] syzkaller0: entered allmulticast mode
[  247.040352][T16476] syzkaller0: left allmulticast mode
[  247.072610][T16481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.164483][T16492] openvswitch: netlink: Multiple metadata blocks provided
[  247.174837][T16487] bond5: entered promiscuous mode
[  247.305996][T16505] tipc: MTU too low for tipc bearer
[  247.355466][T16509] openvswitch: netlink: Multiple metadata blocks provided
[  247.362768][T16505] tipc: MTU too low for tipc bearer
[  247.623153][T16517] wg1 speed is unknown, defaulting to 1000
[  247.665657][T16534] openvswitch: netlink: Multiple metadata blocks provided
[  247.956125][T16545] 8021q: adding VLAN 0 to HW filter on device bond6
[  247.975686][T16545] bond6: (slave gretap2): making interface the new active one
[  247.981012][T16545] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  248.293276][T16574] netlink: 'syz.2.4155': attribute type 11 has an invalid length.
[  248.395359][T16579] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  248.400920][T16579] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  248.660512][T16598] 8021q: adding VLAN 0 to HW filter on device bond10
[  248.673677][T16598] bond10: (slave gretap4): making interface the new active one
[  248.681760][T16598] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  249.286480][T16608] bond7: entered promiscuous mode
[  249.290480][T16608] bond7: entered allmulticast mode
[  249.300664][T16608] bridge4: entered promiscuous mode
[  249.302737][T16608] bridge4: entered allmulticast mode
[  249.307892][T16608] bond7: (slave bridge4): making interface the new active one
[  249.312189][T16608] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  249.712175][T16641] syzkaller1: entered promiscuous mode
[  249.715469][T16641] syzkaller1: entered allmulticast mode
[  250.287599][ T5707] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  250.291999][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  250.294778][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  250.299834][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  250.305597][T16694] smc: net device bond0 applied user defined pnetid SYZ2
[  250.713410][T16714] validate_nla: 10 callbacks suppressed
[  250.713431][T16714] netlink: 'syz.1.4204': attribute type 28 has an invalid length.
[  250.915308][ T5296] udevd[5296]: worker [11327] /devices/virtual/block/nbd1 is taking a long time
[  250.955928][T16728] xt_l2tp: unknown flags: 51
[  251.127967][T16735] __nla_validate_parse: 19 callbacks suppressed
[  251.127981][T16735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4213'.
[  251.170481][T16739] geneve0: left promiscuous mode
[  251.174378][T16739] team0: Port device geneve0 removed
[  251.177236][T16739] batman_adv: batadv0: Removing interface: macvlan2
[  251.182359][T16739] bond6: (slave gretap2): Releasing active interface
[  251.201793][T16739] bond7: (slave bridge4): Releasing backup interface
[  251.217847][T16739] syz.2.4215: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  251.224726][T16739] CPU: 0 UID: 0 PID: 16739 Comm: syz.2.4215 Not tainted syzkaller #0 PREEMPT(full) 
[  251.224751][T16739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.224758][T16739] Call Trace:
[  251.224766][T16739]  <TASK>
[  251.224775][T16739]  dump_stack_lvl+0x189/0x250
[  251.224804][T16739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.224820][T16739]  ? __pfx__printk+0x10/0x10
[  251.224835][T16739]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  251.224849][T16739]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  251.224862][T16739]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  251.224875][T16739]  warn_alloc+0x214/0x310
[  251.224893][T16739]  ? stack_depot_save_flags+0x40/0x860
[  251.224913][T16739]  ? __pfx_warn_alloc+0x10/0x10
[  251.224934][T16739]  ? kasan_save_track+0x4f/0x80
[  251.224950][T16739]  ? xskq_create+0x56/0x170
[  251.224961][T16739]  ? xsk_init_queue+0xb0/0x110
[  251.224981][T16739]  ? xsk_setsockopt+0x4dc/0x8d0
[  251.224999][T16739]  ? do_sock_setsockopt+0x17c/0x1b0
[  251.225016][T16739]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  251.225028][T16739]  ? do_syscall_64+0xfa/0x3b0
[  251.225039][T16739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.225056][T16739]  __vmalloc_node_range_noprof+0x125/0x12f0
[  251.225093][T16739]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  251.225109][T16739]  ? xskq_create+0x56/0x170
[  251.225122][T16739]  ? __kasan_kmalloc+0x93/0xb0
[  251.225139][T16739]  vmalloc_user_noprof+0xad/0xf0
[  251.225155][T16739]  ? xskq_create+0xbf/0x170
[  251.225169][T16739]  xskq_create+0xbf/0x170
[  251.225184][T16739]  xsk_init_queue+0xb0/0x110
[  251.225206][T16739]  xsk_setsockopt+0x4dc/0x8d0
[  251.225227][T16739]  ? __pfx_xsk_setsockopt+0x10/0x10
[  251.225243][T16739]  ? __pfx_aa_sk_perm+0x10/0x10
[  251.225260][T16739]  ? aa_sock_opt_perm+0xff/0x1b0
[  251.225275][T16739]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  251.225286][T16739]  ? __pfx_xsk_setsockopt+0x10/0x10
[  251.225303][T16739]  do_sock_setsockopt+0x17c/0x1b0
[  251.225321][T16739]  __x64_sys_setsockopt+0x13f/0x1b0
[  251.225338][T16739]  do_syscall_64+0xfa/0x3b0
[  251.225349][T16739]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.225361][T16739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.225372][T16739]  ? exc_page_fault+0x9f/0xf0
[  251.225385][T16739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.225396][T16739] RIP: 0033:0x7f552ff8eba9
[  251.225410][T16739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.225420][T16739] RSP: 002b:00007f5530e68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  251.225436][T16739] RAX: ffffffffffffffda RBX: 00007f55301d5fa0 RCX: 00007f552ff8eba9
[  251.225445][T16739] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  251.225453][T16739] RBP: 00007f5530011e19 R08: 0000000000000004 R09: 0000000000000000
[  251.225459][T16739] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.225465][T16739] R13: 00007f55301d6038 R14: 00007f55301d5fa0 R15: 00007ffdd89ed1f8
[  251.225485][T16739]  </TASK>
[  251.225490][T16739] Mem-Info:
[  251.349346][T16739] active_anon:5633 inactive_anon:0 isolated_anon:0
[  251.349346][T16739]  active_file:1528 inactive_file:38314 isolated_file:0
[  251.349346][T16739]  unevictable:1768 dirty:210 writeback:0
[  251.349346][T16739]  slab_reclaimable:10586 slab_unreclaimable:140495
[  251.349346][T16739]  mapped:18336 shmem:2445 pagetables:1024
[  251.349346][T16739]  sec_pagetables:0 bounce:0
[  251.349346][T16739]  kernel_misc_reclaimable:0
[  251.349346][T16739]  free:160831 free_pcp:24115 free_cma:0
[  251.364990][T16739] Node 0 active_anon:10748kB inactive_anon:0kB active_file:2088kB inactive_file:4440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30360kB dirty:292kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7508kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  251.377507][T16739] Node 1 active_anon:11648kB inactive_anon:0kB active_file:4024kB inactive_file:148816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42984kB dirty:548kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4844kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  251.388753][T16739] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  251.399171][T16739] lowmem_reserve[]: 0 811 811 811 811
[  251.401253][T16739] Node 0 DMA32 free:197352kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10748kB inactive_anon:0kB active_file:2088kB inactive_file:4440kB unevictable:3536kB writepending:292kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:40180kB local_pcp:23760kB free_cma:0kB
[  251.427101][T16739] lowmem_reserve[]: 0 0 0 0 0
[  251.429267][T16739] Node 1 DMA32 free:388256kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18208kB local_pcp:10828kB free_cma:0kB
[  251.441477][T16739] lowmem_reserve[]: 0 0 854 854 854
[  251.443355][T16739] Node 1 Normal free:50548kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11720kB inactive_anon:0kB active_file:4024kB inactive_file:148808kB unevictable:3536kB writepending:548kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38092kB local_pcp:18984kB free_cma:0kB
[  251.454770][T16739] lowmem_reserve[]: 0 0 0 0 0
[  251.456989][T16739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  251.462422][T16739] Node 0 DMA32: 1528*4kB (UM) 251*8kB (UM) 231*16kB (U) 226*32kB (UE) 385*64kB (UME) 193*128kB (UME) 68*256kB (UM) 42*512kB (UM) 40*1024kB (UM) 16*2048kB (UME) 4*4096kB (UM) = 197416kB
[  251.470139][T16739] Node 1 DMA32: 44*4kB (UM) 46*8kB (UME) 54*16kB (UM) 29*32kB (UM) 18*64kB (UME) 6*128kB (UME) 4*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (ME) 91*4096kB (M) = 388256kB
[  251.476254][T16739] Node 1 Normal: 1613*4kB (M) 468*8kB (UME) 294*16kB (UME) 108*32kB (UME) 19*64kB (UME) 30*128kB (UM) 16*256kB (UM) 5*512kB (UME) 2*1024kB (M) 3*2048kB (UM) 3*4096kB (U) = 50548kB
[  251.483510][T16739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  251.487361][T16739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  251.490956][T16739] 43613 total pagecache pages
[  251.492679][T16739] 0 pages in swap cache
[  251.494245][T16739] Free swap  = 124996kB
[  251.495737][T16739] Total swap = 124996kB
[  251.497596][T16739] 786301 pages RAM
[  251.499167][T16739] 0 pages HighMem/MovableOnly
[  251.501143][T16739] 241348 pages reserved
[  251.502828][T16739] 0 pages cma reserved
[  251.538456][T16749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4219'.
[  251.559222][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4219'.
[  251.693518][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'.
[  251.800135][T16769] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  251.815733][T16768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4225'.
[  251.820556][T16768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4225'.
[  251.886196][T16765] "syz.2.4224" (16765) uses obsolete ecb(arc4) skcipher
[  251.902118][T16780] syzkaller0: entered allmulticast mode
[  251.937407][T16780] syzkaller0: left allmulticast mode
[  251.984351][T16785] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  252.002868][T16787] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  252.020220][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'.
[  252.051657][T16794] openvswitch: netlink: Actions may not be safe on all matching packets
[  252.443014][T16829] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4242'.
[  252.845339][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'.
[  252.875399][T16838] "syz.1.4248" (16838) uses obsolete ecb(arc4) skcipher
[  253.200616][T16864] syzkaller0: entered allmulticast mode
[  253.232912][T16864] syzkaller0: left allmulticast mode
[  253.372992][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[  253.453105][T16884] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  253.546934][T16889] netlink: 'syz.2.4264': attribute type 4 has an invalid length.
[  253.565068][T16892] netlink: 'syz.1.4266': attribute type 1 has an invalid length.
[  253.572777][T16892] netlink: 'syz.1.4266': attribute type 2 has an invalid length.
[  253.577207][T16892] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  253.880516][   T33] audit: type=1326 audit(1758096819.104:9): auid=4294967295 uid=101 gid=102 ses=4294967295 subj=unconfined pid=16900 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=c000003e syscall=41 compat=0 ip=0x7f908be97bd7 code=0x0
[  253.998252][T16908] netlink: 'syz.2.4271': attribute type 39 has an invalid length.
[  254.111968][T16921] syzkaller0: entered allmulticast mode
[  254.150234][T16921] syzkaller0: left allmulticast mode
[  254.171357][T16925] netlink: 'syz.2.4276': attribute type 1 has an invalid length.
[  254.202977][T16925] 8021q: adding VLAN 0 to HW filter on device bond8
[  254.228917][T16932] netlink: 'syz.0.4279': attribute type 1 has an invalid length.
[  254.264143][T16932] bond6: (slave bridge6): making interface the new active one
[  254.279240][T16932] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  254.284115][T16935] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.291583][T16935] syzkaller0: entered promiscuous mode
[  254.293865][T16935] syzkaller0: entered allmulticast mode
[  254.314204][T16935] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  254.325069][T16935] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  254.434610][T16952] netlink: 'syz.0.4286': attribute type 1 has an invalid length.
[  254.529435][T16952] 8021q: adding VLAN 0 to HW filter on device bond7
[  254.589453][T16967] syzkaller0: left promiscuous mode
[  254.591434][T16967] syzkaller0: left allmulticast mode
[  254.846613][T16986] openvswitch: netlink: Multiple metadata blocks provided
[  255.175416][T16997] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  255.179950][T16997] vlan0: left promiscuous mode
[  255.184145][T16997] bridge4: left promiscuous mode
[  255.185982][T16997] bridge4: left allmulticast mode
[  255.191921][T16997] bond8: left promiscuous mode
[  255.671734][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.674472][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.774424][T17042] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  255.834004][T17053] netlink: 'syz.0.4320': attribute type 1 has an invalid length.
[  255.843184][T17053] netlink: 'syz.0.4320': attribute type 11 has an invalid length.
[  255.854486][T17058] "syz.1.4322" (17058) uses obsolete ecb(arc4) skcipher
[  255.862316][T17056] IPv6: Can't replace route, no match found
[  255.872782][T17058] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  255.914554][T17064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.992212][T17070] openvswitch: netlink: Multiple metadata blocks provided
[  256.166146][T17080] __nla_validate_parse: 24 callbacks suppressed
[  256.166166][T17080] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4331'.
[  256.214007][T17089] netlink: 'syz.0.4334': attribute type 1 has an invalid length.
[  256.234406][T17089] 8021q: adding VLAN 0 to HW filter on device bond8
[  256.244506][T17089] macvlan3: entered promiscuous mode
[  256.246472][T17089] macvlan3: entered allmulticast mode
[  256.249249][T17089] bond8: entered promiscuous mode
[  256.251512][T17089] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  256.257439][T17089] bond8: left promiscuous mode
[  256.343277][T17092] openvswitch: netlink: Multiple metadata blocks provided
[  256.476466][T17097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'.
[  256.491475][T17097] syz_tun (unregistering): left allmulticast mode
[  256.528007][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4337'.
[  256.531006][T17098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4337'.
[  257.032818][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'.
[  257.037150][T17123] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  257.041196][T17123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.086571][T17126] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4347'.
[  257.462620][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4355'.
[  257.538943][T17152] openvswitch: netlink: Multiple metadata blocks provided
[  257.589544][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 90 seconds
[  257.594019][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 90 seconds
[  257.598777][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 90 seconds
[  257.603207][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 90 seconds
[  257.941999][T17175] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4367'.
[  258.236908][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  258.237485][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4377'.
[  258.242426][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4378'.
[  258.575486][T17249] netlink: 'syz.2.4390': attribute type 1 has an invalid length.
[  258.614308][T17249] 8021q: adding VLAN 0 to HW filter on device bond9
[  258.626323][T17249] macvlan3: entered promiscuous mode
[  258.629300][T17249] macvlan3: entered allmulticast mode
[  258.632487][T17249] bond9: entered promiscuous mode
[  258.634697][T17249] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  258.641089][T17249] bond9: left promiscuous mode
[  258.742271][T17265] "syz.1.4395" (17265) uses obsolete ecb(arc4) skcipher
[  258.913702][T17283] netlink: 'syz.1.4402': attribute type 1 has an invalid length.
[  259.005589][ T5296] udevd[5296]: worker [13431] terminated by signal 33 (Unknown signal 33)
[  259.009260][ T5296] udevd[5296]: worker [13431] failed while handling '/devices/virtual/nfc/nfc2/rfkill50'
[  259.084138][T17308] netlink: 'syz.2.4410': attribute type 1 has an invalid length.
[  259.375050][T17333] batman_adv: batadv0: Removing interface: virt_wifi0
[  259.380975][T17333] bond10: (slave gretap4): Releasing active interface
[  259.386527][T17333] netlink: 'syz.1.4419': attribute type 10 has an invalid length.
[  259.391536][T17333] bond0: (slave wlan1): refused to change device type
[  259.613252][T17354] netlink: 'syz.2.4426': attribute type 1 has an invalid length.
[  259.628787][T17354] 8021q: adding VLAN 0 to HW filter on device bond10
[  260.129456][T17383] openvswitch: netlink: Message has 16 unknown bytes.
[  260.132565][T17383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.278060][T17399] netlink: 'syz.1.4440': attribute type 3 has an invalid length.
[  260.287124][T17400] netlink: 'syz.1.4440': attribute type 3 has an invalid length.
[  260.419180][T17412] "syz.2.4445" (17412) uses obsolete ecb(arc4) skcipher
[  260.807926][   T57] block nbd5: Receive control failed (result -107)
[  260.848513][T17457] nbd5: detected capacity change from 0 to 32
[  261.028119][T17477] tipc: Enabling of bearer <et:g> rejected, media not registered
[  261.068870][T17480] batadv_slave_0: entered promiscuous mode
[  261.174906][T17490] Bluetooth: hci1: too big key_count value 32778
[  261.181210][T17490] "syz.0.4474" (17490) uses obsolete ecb(arc4) skcipher
[  261.259144][T17499] __nla_validate_parse: 21 callbacks suppressed
[  261.259158][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4477'.
[  261.270090][T17503] openvswitch: netlink: Multiple metadata blocks provided
[  261.588682][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4486'.
[  261.840036][T17546] openvswitch: netlink: Multiple metadata blocks provided
[  261.860229][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4495'.
[  262.112676][T17566] openvswitch: netlink: Multiple metadata blocks provided
[  262.225980][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4508'.
[  262.275314][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4509'.
[  262.357372][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4511'.
[  262.388912][T17594] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4513'.
[  262.392560][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4513'.
[  262.467021][T17599] syzkaller1: entered promiscuous mode
[  262.469509][T17599] syzkaller1: entered allmulticast mode
[  262.666789][T17620] openvswitch: netlink: Multiple metadata blocks provided
[  262.920884][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'.
[  263.084458][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'.
[  263.114974][T17654] netlink: 'syz.0.4533': attribute type 1 has an invalid length.
[  263.129308][T17654] 8021q: adding VLAN 0 to HW filter on device bond9
[  263.151945][T17654] macvlan3: entered promiscuous mode
[  263.154459][T17654] macvlan3: entered allmulticast mode
[  263.158545][T17654] bond9: entered promiscuous mode
[  263.161362][T17654] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  263.167234][T17654] bond9: left promiscuous mode
[  263.336561][T17659] netlink: 'syz.0.4535': attribute type 3 has an invalid length.
[  263.346392][T17659] netlink: 'syz.0.4535': attribute type 1 has an invalid length.
[  263.363731][T17659] 8021q: adding VLAN 0 to HW filter on device bond10
[  263.466942][T17666] netlink: 'syz.0.4538': attribute type 11 has an invalid length.
[  263.470240][T17666] netlink: 'syz.0.4538': attribute type 11 has an invalid length.
[  263.638998][T17675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.950836][T17693] netlink: 'syz.2.4547': attribute type 13 has an invalid length.
[  263.953532][T17693] netlink: 'syz.2.4547': attribute type 17 has an invalid length.
[  263.971997][T17693] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.975300][T17693] 8021q: adding VLAN 0 to HW filter on device team0
[  263.980500][T17693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.990784][T17686] netlink: 'syz.0.4546': attribute type 1 has an invalid length.
[  265.091778][T17729] openvswitch: netlink: Multiple metadata blocks provided
[  265.268876][T17737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.394656][T17753] netlink: 'syz.1.4564': attribute type 3 has an invalid length.
[  265.615654][T17768] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  265.621360][T17770] netlink: 'syz.1.4572': attribute type 4 has an invalid length.
[  265.780749][T17791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.790724][T17791] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  265.803993][T17791] syzkaller0: mtu greater than device maximum
[  266.040238][T17816] tipc: Enabled bearer <eth:vlan0>, priority 18
[  266.267381][T17831] netlink: 'syz.1.4598': attribute type 1 has an invalid length.
[  266.367540][T17837] can: request_module (can-proto-0) failed.
[  266.457105][T17843] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20004
[  266.588336][T17856] xt_l2tp: v2 tid > 0xffff: 37482740
[  266.643957][T17860] __nla_validate_parse: 19 callbacks suppressed
[  266.643971][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4608'.
[  266.687637][T17862] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.708765][T17862] syzkaller0: entered promiscuous mode
[  266.710886][T17862] syzkaller0: entered allmulticast mode
[  266.788365][T17877] netlink: 'syz.1.4614': attribute type 39 has an invalid length.
[  266.843065][T17885] "syz.1.4614" (17885) uses obsolete ecb(arc4) skcipher
[  267.051479][T17917] syzkaller1: entered promiscuous mode
[  267.053552][T17917] syzkaller1: entered allmulticast mode
[  267.079104][   T24] tipc: Node number set to 3758096385
[  267.151252][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'.
[  267.176310][T17927] openvswitch: netlink: Multiple metadata blocks provided
[  267.469596][T17937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4635'.
[  267.660911][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4644'.
[  267.758777][T17969] openvswitch: netlink: Multiple metadata blocks provided
[  268.598944][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'.
[  268.675860][T17976] delete_channel: no stack
[  268.768685][T18007] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4660'.
[  268.775344][T18007] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  268.780941][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.786014][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.790382][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'.
[  268.793357][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4660'.
[  268.802768][T18007] validate_nla: 1 callbacks suppressed
[  268.802783][T18007] netlink: 'syz.0.4660': attribute type 2 has an invalid length.
[  268.810178][T18007] netlink: 'syz.0.4660': attribute type 2 has an invalid length.
[  269.773729][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4677'.
[  269.780590][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4677'.
[  269.828834][T18063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.831860][T18063] IPv6: NLM_F_CREATE should be set when creating new route
[  269.834855][T18063] IPv6: NLM_F_CREATE should be set when creating new route
[  269.837922][T18063] IPv6: NLM_F_CREATE should be set when creating new route
[  270.085908][T18080] netlink: 'syz.2.4684': attribute type 83 has an invalid length.
[  270.260980][T18091] tun0: tun_chr_ioctl cmd 1074025672
[  270.262978][T18091] tun0: ignored: set checksum disabled
[  270.486142][T18101] netlink: 'syz.2.4692': attribute type 1 has an invalid length.
[  270.533826][T18103] syzkaller0: entered promiscuous mode
[  270.536156][T18103] syzkaller0: entered allmulticast mode
[  270.546244][T18103] syzkaller0: left promiscuous mode
[  270.549871][T18103] syzkaller0: left allmulticast mode
[  287.669267][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 120 seconds
[  287.672952][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 120 seconds
[  287.676767][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 120 seconds
[  287.680936][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 120 seconds
[  297.162340][T18151] __nla_validate_parse: 8 callbacks suppressed
[  297.162352][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'.
[  297.276149][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4709'.
[  297.300050][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'.
[  297.423896][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'.
[  298.554305][T18206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4729'.
[  298.587964][T18209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4731'.
[  298.591396][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'.
[  298.594937][T18209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4731'.
[  298.602400][T18209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4731'.
[  298.607265][T18209] sctp: [Deprecated]: syz.1.4731 (pid 18209) Use of int in maxseg socket option.
[  298.607265][T18209] Use struct sctp_assoc_value instead
[  298.985497][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'.
[  299.118951][T18291] netlink: 'syz.2.4750': attribute type 1 has an invalid length.
[  299.132331][T18291] 8021q: adding VLAN 0 to HW filter on device bond11
[  299.139913][T18291] macvlan4: entered promiscuous mode
[  299.141716][T18291] macvlan4: entered allmulticast mode
[  299.144279][T18291] bond11: entered promiscuous mode
[  299.146407][T18291] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  299.152678][T18291] bond11: left promiscuous mode
[  299.354154][T18319] syzkaller0: entered promiscuous mode
[  299.355960][T18319] syzkaller0: entered allmulticast mode
[  299.431732][T18331] netlink: 'syz.1.4766': attribute type 1 has an invalid length.
[  299.464583][T18331] 8021q: adding VLAN 0 to HW filter on device bond11
[  299.475316][T18331] macvlan2: entered promiscuous mode
[  299.477519][T18331] macvlan2: entered allmulticast mode
[  299.480797][T18331] bond11: entered promiscuous mode
[  299.483567][T18331] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  299.490791][T18331] bond11: left promiscuous mode
[  299.595580][T18344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.939787][T18391] netlink: 'syz.2.4785': attribute type 1 has an invalid length.
[  299.960143][T18391] 8021q: adding VLAN 0 to HW filter on device bond12
[  299.974221][T18391] macvlan4: entered promiscuous mode
[  299.979315][T18391] macvlan4: entered allmulticast mode
[  299.982374][T18391] bond12: entered promiscuous mode
[  299.984436][T18391] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  299.990345][T18391] bond12: left promiscuous mode
[  300.294795][T18418] tc_dump_action: action bad kind
[  300.392910][T18427] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  300.417182][T18427] 8021q: adding VLAN 0 to HW filter on device bond13
[  300.433393][T18427] macvlan4: entered promiscuous mode
[  300.435694][T18427] macvlan4: entered allmulticast mode
[  300.440195][T18427] bond13: entered promiscuous mode
[  300.443183][T18427] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  300.450091][T18427] bond13: left promiscuous mode
[  300.623822][T18444] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  300.824042][T18455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.972224][T18462] netlink: 'syz.2.4811': attribute type 1 has an invalid length.
[  300.991447][T18462] 8021q: adding VLAN 0 to HW filter on device bond14
[  301.004060][T18462] macvlan4: entered promiscuous mode
[  301.005963][T18462] macvlan4: entered allmulticast mode
[  301.008866][T18462] bond14: entered promiscuous mode
[  301.011170][T18462] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  301.016567][T18462] bond14: left promiscuous mode
[  301.709371][T18508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.711884][T18508] IPv6: NLM_F_CREATE should be set when creating new route
[  301.714405][T18508] IPv6: NLM_F_CREATE should be set when creating new route
[  301.716960][T18508] IPv6: NLM_F_CREATE should be set when creating new route
[  301.719564][T18509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.734166][T18508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.751465][ T5707] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  301.754686][ T5707] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  301.760987][ T5707] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  301.770691][ T5707] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  302.226248][T18539] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  302.231880][T18539] tipc: Resetting bearer <eth:syzkaller0>
[  302.235928][T18539] syzkaller0: left promiscuous mode
[  302.238429][T18539] syzkaller0: left allmulticast mode
[  302.245460][T18539] bond5: left promiscuous mode
[  302.250881][T18539] bond7: left promiscuous mode
[  302.252693][T18539] bond7: left allmulticast mode
[  302.254488][T18539] bridge4: left promiscuous mode
[  302.256278][T18539] bridge4: left allmulticast mode
[  302.274365][T18552] __nla_validate_parse: 20 callbacks suppressed
[  302.274378][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4841'.
[  302.299099][ T5909] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.305876][ T5909] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.309934][ T5909] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.313153][ T5909] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.450840][T18554] netlink: 'syz.1.4849': attribute type 30 has an invalid length.
[  302.508083][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4853'.
[  302.511160][T18571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4853'.
[  302.519016][T18573] netlink: 'syz.1.4854': attribute type 1 has an invalid length.
[  302.549177][T18573] 8021q: adding VLAN 0 to HW filter on device bond12
[  302.559881][T18573] macvlan2: entered promiscuous mode
[  302.561770][T18573] macvlan2: entered allmulticast mode
[  302.562872][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4855'.
[  302.564500][T18573] bond12: entered promiscuous mode
[  302.570165][T18573] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  302.579559][T18573] bond12: left promiscuous mode
[  302.859122][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4863'.
[  303.185973][T18615] netlink: 'syz.1.4870': attribute type 1 has an invalid length.
[  303.211479][T18615] 8021q: adding VLAN 0 to HW filter on device bond13
[  303.229920][T18615] veth75: entered promiscuous mode
[  303.236195][T18615] bond13: (slave veth75): Enslaving as an active interface with an up link
[  303.441987][T18632] syzkaller1: entered promiscuous mode
[  303.443842][T18632] syzkaller1: entered allmulticast mode
[  303.550682][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4878'.
[  303.591844][T18638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4879'.
[  303.821374][T18652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4884'.
[  304.012245][T18664] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.4888'.
[  304.016370][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4888'.
[  304.033591][T18664] netlink: 'syz.0.4888': attribute type 2 has an invalid length.
[  304.170195][T18674] netlink: 'syz.0.4893': attribute type 1 has an invalid length.
[  304.188704][T18674] 8021q: adding VLAN 0 to HW filter on device bond11
[  304.372729][T18697] syzkaller1: entered promiscuous mode
[  304.374800][T18697] syzkaller1: entered allmulticast mode
[  304.483893][T18702] netlink: 'syz.0.4903': attribute type 1 has an invalid length.
[  304.501473][T18702] 8021q: adding VLAN 0 to HW filter on device bond12
[  304.815821][T18747] openvswitch: netlink: Flow key attribute not present in set flow.
[  304.896542][T18762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.901630][T18762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  305.324003][T18824] tipc: Enabled bearer <eth:team0>, priority 10
[  305.330854][T18827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.358240][T18830] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.361694][T18830] syzkaller0: entered promiscuous mode
[  305.363445][T18830] syzkaller0: entered allmulticast mode
[  305.818832][T18870] netlink: 'syz.1.4953': attribute type 1 has an invalid length.
[  305.835049][T18870] 8021q: adding VLAN 0 to HW filter on device bond14
[  305.968388][T18885] netlink: 'syz.2.4957': attribute type 1 has an invalid length.
[  305.980714][T18885] 8021q: adding VLAN 0 to HW filter on device bond15
[  305.991244][T18885] bond15: (slave geneve2): making interface the new active one
[  305.995642][T18885] bond15: (slave geneve2): Enslaving as an active interface with an up link
[  305.998878][ T5909] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.002969][T18885] netlink: 'syz.2.4957': attribute type 8 has an invalid length.
[  306.009221][ T5909] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.014688][ T5909] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.080489][ T5909] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.083653][T18898] tipc: Disabling bearer <eth:vlan0>
[  306.200308][T18907] netlink: 'syz.1.4966': attribute type 1 has an invalid length.
[  306.213736][T18907] 8021q: adding VLAN 0 to HW filter on device bond15
[  306.451170][T18942] netlink: 'syz.2.4980': attribute type 1 has an invalid length.
[  306.470768][T18942] 8021q: adding VLAN 0 to HW filter on device bond16
[  306.535792][T18955] netlink: 'syz.1.4983': attribute type 3 has an invalid length.
[  306.545317][T18955] bond0: entered promiscuous mode
[  306.553011][T18955] bond0: left promiscuous mode
[  306.760784][T18982] netlink: 'syz.1.4994': attribute type 1 has an invalid length.
[  306.778749][T18982] 8021q: adding VLAN 0 to HW filter on device bond16
[  306.915758][T18985] netlink: 'syz.1.4995': attribute type 29 has an invalid length.
[  307.119311][T18999] bond17: entered promiscuous mode
[  307.121426][T18999] 8021q: adding VLAN 0 to HW filter on device bond17
[  307.299143][T19014] syzkaller1: tun_chr_ioctl cmd 1074025677
[  307.301295][T19014] syzkaller1: linktype set to 778
[  307.438347][T19023] __nla_validate_parse: 18 callbacks suppressed
[  307.438360][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5006'.
[  307.491879][T19027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5007'.
[  308.482579][T19042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5013'.
[  308.700300][T19053] pim6reg1: entered promiscuous mode
[  308.702383][T19053] pim6reg1: entered allmulticast mode
[  308.705142][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5017'.
[  308.758344][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5018'.
[  308.763161][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5018'.
[  308.814898][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5020'.
[  308.892859][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5023'.
[  309.004926][T19073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5023'.
[  309.062837][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.387554][T19096] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5035'.
[  310.398356][T19132] tc_dump_action: action bad kind
[  310.715735][T19143] validate_nla: 1 callbacks suppressed
[  310.715747][T19143] netlink: 'syz.2.5052': attribute type 1 has an invalid length.
[  310.721213][T19143] netlink: 'syz.2.5052': attribute type 3 has an invalid length.
[  310.889976][T19156] openvswitch: netlink: Message has 1 unknown bytes.
[  310.892817][T19156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.937494][T19160] netlink: 'syz.1.5059': attribute type 1 has an invalid length.
[  310.970456][T19160] 8021q: adding VLAN 0 to HW filter on device bond18
acpid: malformed netlink msg, length -1126629284
[  311.919329][   T33] audit: type=1107 audit(1758096877.144:10): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  312.065056][T19184] bond13: (slave veth75): Releasing backup interface
[  312.129964][T19197] netlink: 'syz.2.5071': attribute type 1 has an invalid length.
[  312.149689][T19197] 8021q: adding VLAN 0 to HW filter on device bond17
[  312.624656][T19234] __nla_validate_parse: 9 callbacks suppressed
[  312.624673][T19234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5086'.
[  312.628148][T19233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5087'.
[  312.642573][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5087'.
[  312.724665][T19240] netlink: 'syz.1.5089': attribute type 1 has an invalid length.
[  312.748581][T19240] 8021q: adding VLAN 0 to HW filter on device bond19
[  312.778710][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5091'.
[  312.782433][T19245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5091'.
[  312.791896][T19245] geneve3: entered promiscuous mode
[  312.792617][T19247] netlink: 'syz.1.5092': attribute type 1 has an invalid length.
[  312.794272][T19245] geneve3: entered allmulticast mode
[  312.797037][T19247] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5092'.
[  312.885664][T19247] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  314.020701][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5109'.
[  314.029425][ T5909] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  314.038308][ T5909] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  314.041573][T19296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5109'.
[  314.053287][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5109'.
[  314.057781][   T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  314.060475][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5111'.
[  314.407322][   T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  314.790880][T19353] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.107241][   T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  315.762264][T19404] netlink: 'syz.1.5147': attribute type 9 has an invalid length.
[  316.323694][T19424] netlink: 'syz.0.5154': attribute type 13 has an invalid length.
[  316.428722][T19430] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  316.435067][T19430] bond0: Removing last arp target with arp_interval on
[  316.439154][T19430] bond0: option lp_interval: invalid value (18446744071562067968)
[  316.442487][T19430] bond0: option lp_interval: allowed values 1 - 2147483647
[  316.638466][T19432] netlink: 'syz.2.5158': attribute type 1 has an invalid length.
[  316.641648][T19432] nbd: error processing sock list
[  316.646126][T19432] block nbd6: shutting down sockets
[  316.722222][T19449] netlink: 'syz.2.5164': attribute type 1 has an invalid length.
[  316.742119][T19449] 8021q: adding VLAN 0 to HW filter on device bond18
[  316.809991][T19454] ip6tnl1: entered promiscuous mode
[  317.110479][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.113354][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.114730][T19473] bond_slave_1: mtu less than device minimum
[  317.554554][T19494] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  317.561954][T19496] netlink: 'syz.1.5179': attribute type 1 has an invalid length.
[  317.587857][T19496] 8021q: adding VLAN 0 to HW filter on device bond20
[  317.593491][T19499] IPv6: sit4: Disabled Multicast RS
[  317.596223][T19499] sit4: entered allmulticast mode
[  317.765687][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 150 seconds
[  317.771991][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 150 seconds
[  317.776166][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 150 seconds
[  317.781383][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 150 seconds
[  317.822329][T19516] __nla_validate_parse: 22 callbacks suppressed
[  317.822348][T19516] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5187'.
[  317.847350][T19516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5187'.
[  317.898657][T19526] netlink: 'syz.2.5189': attribute type 5 has an invalid length.
[  317.961450][T19526] ieee802154 phy0 wpan0: encryption failed: -22
[  318.307160][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  318.382034][T19554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5200'.
[  318.822850][T19587] 8021q: adding VLAN 0 to HW filter on device bond19
[  318.901163][T19587] bond19 (unregistering): Released all slaves
[  318.993270][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'.
[  318.996612][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5215'.
[  319.147744][T19606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5220'.
[  319.162795][T19604] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  319.168960][T19604] netlink: 'syz.1.5219': attribute type 1 has an invalid length.
[  319.189867][T19604] 8021q: adding VLAN 0 to HW filter on device bond21
[  319.215430][T19604] bond21: (slave macvlan1): making interface the new active one
[  319.220037][T19604] bond21: (slave macvlan1): Enslaving as an active interface with an up link
[  319.373980][T19627] netlink: 'syz.1.5229': attribute type 1 has an invalid length.
[  319.378499][T19627] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5229'.
[  319.382162][T19627] NCSI netlink: No device for ifindex 0
[  319.434391][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5232'.
[  319.450330][T19633] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  319.513401][T19641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5235'.
[  319.541928][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5236'.
[  319.545354][T19643] netlink: 'syz.0.5236': attribute type 15 has an invalid length.
[  319.570454][T19643] netlink: 'syz.0.5236': attribute type 15 has an invalid length.
[  320.131109][T19664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.704061][T19715] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:0
[  320.782330][T19725] netlink: 'syz.2.5260': attribute type 6 has an invalid length.
[  321.285236][T19755] netlink: 'syz.1.5273': attribute type 1 has an invalid length.
[  321.311893][T19755] 8021q: adding VLAN 0 to HW filter on device bond22
[  321.623995][T19772] IPv6: sit2: Disabled Multicast RS
[  321.732909][T19776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.913294][T19785] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  321.917303][T19785] netlink: 'syz.1.5284': attribute type 1 has an invalid length.
[  321.951673][T19785] 8021q: adding VLAN 0 to HW filter on device bond23
[  322.057032][T19802] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20004
[  322.406009][T19846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.745808][T19879] netlink: zone id is out of range
[  322.748785][T19879] netlink: zone id is out of range
[  322.753275][T19879] netlink: zone id is out of range
[  322.797880][T19879] netlink: set zone limit has 4 unknown bytes
[  323.025822][T19903] __nla_validate_parse: 15 callbacks suppressed
[  323.025842][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5321'.
[  323.494812][T19930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5328'.
[  323.532834][T19932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5329'.
[  323.753048][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5332'.
[  323.757476][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5332'.
[  323.781231][T19946] openvswitch: netlink: VXLAN extension 226 out of range max 1
[  323.855253][T19948] netlink: 'syz.0.5334': attribute type 83 has an invalid length.
[  323.860810][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'.
[  323.869393][T19949] bond0: entered promiscuous mode
[  323.871863][T19949] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  323.875279][T19949] bond0: left promiscuous mode
[  323.917932][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'.
[  323.992254][T19955] caif0: mtu less than device minimum
[  324.052938][T19961] netlink: 'syz.0.5339': attribute type 13 has an invalid length.
[  324.056182][T19961] netlink: 'syz.0.5339': attribute type 17 has an invalid length.
[  324.098277][T19961] 8021q: adding VLAN 0 to HW filter on device team0
[  324.107682][T19961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.175938][T19918] delete_channel: no stack
[  324.381288][T19985] netlink: 'syz.2.5346': attribute type 1 has an invalid length.
[  324.384151][T19985] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5346'.
[  324.406287][T19985] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5346'.
[  324.803473][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5352'.
[  324.847903][T20010] netlink: 'syz.2.5353': attribute type 1 has an invalid length.
[  325.259338][T20017] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003
[  325.869782][T20041] xt_l2tp: wrong L2TP version: 1
[  326.231846][T20058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.556429][T20068] netlink: 'syz.2.5371': attribute type 1 has an invalid length.
[  326.582260][T20068] 8021q: adding VLAN 0 to HW filter on device bond19
[  326.595534][T20068] bond19: (slave macvlan1): Enslaving as an active interface with a down link
[  326.688996][T20076] netlink: 'syz.2.5374': attribute type 6 has an invalid length.
[  326.714265][T20078] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  326.719066][T20078] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  326.723387][T20078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.828453][T20088] dvmrp0: entered allmulticast mode
[  326.938734][T20094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.348382][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  327.371328][T20122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.532877][T20129] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  327.581866][T20145] netlink: 'syz.2.5398': attribute type 7 has an invalid length.
[  327.584543][T20145] netlink: 'syz.2.5398': attribute type 8 has an invalid length.
[  327.623712][T20143] netlink: 'syz.0.5397': attribute type 1 has an invalid length.
[  327.651417][T20143] 8021q: adding VLAN 0 to HW filter on device bond13
[  327.660309][T20143] bond13: (slave macvlan1): making interface the new active one
[  327.664291][T20143] bond13: (slave macvlan1): Enslaving as an active interface with an up link
[  327.737761][T20162] netlink: 'syz.1.5403': attribute type 1 has an invalid length.
[  327.822265][T20162] 8021q: adding VLAN 0 to HW filter on device bond24
[  328.100712][T20195] __nla_validate_parse: 10 callbacks suppressed
[  328.100728][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[  328.110688][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[  328.237881][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  328.241122][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5418'.
[  328.249156][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  328.249216][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  328.252155][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  328.255104][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5418'.
[  328.259906][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  328.264640][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  328.301413][T20218] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.5421'.
[  328.332925][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5422'.
[  328.350907][T20222] netlink: 'syz.2.5423': attribute type 1 has an invalid length.
[  328.358352][T20222] netlink: 'syz.2.5423': attribute type 1 has an invalid length.
[  328.362046][T20222] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5423'.
[  328.492175][T20234] netlink: 'syz.1.5427': attribute type 1 has an invalid length.
[  328.521729][T20236] netlink: 'syz.2.5428': attribute type 1 has an invalid length.
[  328.524277][T20236] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5428'.
[  328.541210][T20236] team1: entered promiscuous mode
[  328.542954][T20236] team1: entered allmulticast mode
[  328.545015][T20236] 8021q: adding VLAN 0 to HW filter on device team1
[  328.735967][T20248] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  329.163755][T20274] 8021q: adding VLAN 0 to HW filter on device bond14
[  329.595862][T20309] 8021q: adding VLAN 0 to HW filter on device bond25
[  329.657332][T20319] bond21: (slave macvlan1): Releasing active interface
[  329.682262][T20319] bond25: (slave macvlan1): making interface the new active one
[  329.685716][T20319] bond25: (slave macvlan1): Enslaving as an active interface with an up link
[  330.071336][T20368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.207422][T20385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.402394][T20396] netem: change failed
[  331.344295][T20435] tipc: Resetting bearer <eth:team0>
[  331.371857][T20435] batadv_slave_0: left promiscuous mode
[  331.411503][T20435] geneve4: left promiscuous mode
[  331.433641][T20435] geneve5: left promiscuous mode
[  331.435846][T20435] geneve5: left allmulticast mode
[  331.544301][ T5872] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.549440][ T5872] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  331.553332][ T5872] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.557396][ T5872] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  331.560886][ T5872] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.564291][ T5872] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  331.614298][ T5872] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.619033][ T5872] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  331.786226][T20455] validate_nla: 4 callbacks suppressed
[  331.786240][T20455] netlink: 'syz.2.5499': attribute type 1 has an invalid length.
[  331.808348][T20455] 8021q: adding VLAN 0 to HW filter on device bond20
[  331.818281][T20455] bond19: (slave macvlan1): Releasing active interface
[  331.832117][T20455] bond20: (slave macvlan1): Enslaving as an active interface with a down link
[  332.321216][T20497] veth79: entered promiscuous mode
[  332.446931][T20514] netlink: 'syz.0.5517': attribute type 1 has an invalid length.
[  332.839766][T20542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.881151][T20544] netlink: 'syz.0.5528': attribute type 1 has an invalid length.
[  332.903420][T20544] 8021q: adding VLAN 0 to HW filter on device bond15
[  333.018970][T20549] netlink: 'syz.0.5530': attribute type 1 has an invalid length.
[  333.046036][T20549] 8021q: adding VLAN 0 to HW filter on device bond16
[  333.054714][T20549] bond13: (slave macvlan1): Releasing active interface
[  333.072286][T20549] bond16: (slave macvlan1): making interface the new active one
[  333.080386][T20549] bond16: (slave macvlan1): Enslaving as an active interface with an up link
[  333.185343][T20557] __nla_validate_parse: 85 callbacks suppressed
[  333.185362][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5533'.
[  333.199549][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5533'.
[  333.235532][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'.
[  333.280147][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5535'.
[  333.741105][T20598] netlink: 'syz.0.5549': attribute type 1 has an invalid length.
[  333.762628][T20608] netlink: 'syz.2.5551': attribute type 1 has an invalid length.
[  333.766160][T20609] netlink: 'syz.2.5551': attribute type 1 has an invalid length.
[  333.772965][T20598] bond16: (slave macvlan1): Releasing active interface
[  333.807862][T20608] 8021q: adding VLAN 0 to HW filter on device bond21
[  333.836503][T20607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5552'.
[  333.853532][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5553'.
[  333.861127][T20621] netlink: 'syz.0.5553': attribute type 13 has an invalid length.
[  333.915777][T20608] veth15: entered promiscuous mode
[  333.923514][T20608] bond21: (slave veth15): Enslaving as an active interface with a down link
[  333.980433][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5556'.
[  334.059149][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5557'.
[  334.133354][T20638] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  334.137054][T20638] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  334.157970][T20638] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5558'.
[  334.214486][T20641] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  334.674243][T20648] netlink: 'syz.0.5563': attribute type 2 has an invalid length.
[  334.679967][T20648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5563'.
[  334.793294][T20653] ieee802154 phy0 wpan0: encryption failed: -22
[  334.959288][T20656] netlink: 'syz.2.5566': attribute type 7 has an invalid length.
[  335.778560][T20683] sctp: [Deprecated]: syz.0.5575 (pid 20683) Use of int in maxseg socket option.
[  335.778560][T20683] Use struct sctp_assoc_value instead
[  336.069204][T20704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  336.088241][T20704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  336.096417][T20704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  336.104530][T20704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  336.110387][T20704] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  337.061796][T20771] validate_nla: 2 callbacks suppressed
[  337.061815][T20771] netlink: 'syz.0.5606': attribute type 1 has an invalid length.
[  337.111281][T20771] 8021q: adding VLAN 0 to HW filter on device bond17
[  337.175308][T20775] bond17: (slave veth7): Enslaving as an active interface with a down link
[  337.215949][T20777] nbd: must specify a device to reconfigure
[  337.261920][T20780] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.433329][T20792] netlink: 'syz.0.5612': attribute type 1 has an invalid length.
[  337.451519][T20792] 8021q: adding VLAN 0 to HW filter on device bond18
[  337.471228][T20792] bond18: (slave macvlan1): making interface the new active one
[  337.475771][T20792] bond18: (slave macvlan1): Enslaving as an active interface with an up link
[  338.621947][T20814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.703116][T20836] __nla_validate_parse: 5 callbacks suppressed
[  338.703135][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'.
[  338.715113][T20836] netlink: 'syz.1.5630': attribute type 14 has an invalid length.
[  338.724117][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'.
[  338.728813][T20836] netlink: 'syz.1.5630': attribute type 14 has an invalid length.
[  339.489362][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5646'.
[  339.566896][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'.
[  339.667424][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  339.825555][T20904] netlink: 'syz.0.5651': attribute type 11 has an invalid length.
[  339.876735][T20912] netlink: 'syz.0.5652': attribute type 4 has an invalid length.
[  339.880164][T20912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5652'.
[  339.885554][T20912] netlink: 'syz.0.5652': attribute type 12 has an invalid length.
[  339.890845][T20912] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5652'.
[  339.963549][T20920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5655'.
[  340.211104][T20941] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  340.273651][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5663'.
[  340.460538][T20953] nbd: couldn't find a device at index 64
[  340.571321][T20967] netlink: zone id is out of range
[  340.574712][T20967] netlink: zone id is out of range
[  340.590867][T20967] netlink: zone id is out of range
[  340.593138][T20967] netlink: zone id is out of range
[  340.596502][T20967] netlink: zone id is out of range
[  340.600324][T20967] netlink: zone id is out of range
[  340.603062][T20967] netlink: zone id is out of range
[  340.618782][T20967] netlink: zone id is out of range
[  340.629413][T20967] netlink: zone id is out of range
[  340.679564][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5676'.
[  340.841846][T20992] netlink: 'syz.0.5678': attribute type 1 has an invalid length.
[  340.861006][T20992] 8021q: adding VLAN 0 to HW filter on device bond19
[  340.871803][T20992] bond18: (slave macvlan1): Releasing active interface
[  340.888839][T20992] bond19: (slave macvlan1): making interface the new active one
[  340.893428][T20992] bond19: (slave macvlan1): Enslaving as an active interface with an up link
[  341.391954][T21002] netlink: 'syz.2.5681': attribute type 9 has an invalid length.
[  341.447197][T21004] siw: device registration error -23
[  341.677652][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5687'.
[  341.691294][T21016] veth1_virt_wifi: entered allmulticast mode
[  341.746551][T21016] tipc: Resetting bearer <eth:syzkaller0>
[  341.754376][T21016] netlink: 'syz.1.5688': attribute type 12 has an invalid length.
[  341.835498][T21026] nbd: must specify a device to reconfigure
[  341.859926][T21028] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.879246][T21030] 8021q: adding VLAN 0 to HW filter on device bond26
[  341.897822][T21030] bond25: (slave macvlan1): Releasing active interface
[  341.906094][T21030] bond26: (slave macvlan1): making interface the new active one
[  341.910414][T21030] bond26: (slave macvlan1): Enslaving as an active interface with an up link
[  342.224837][T21055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.233993][T21055] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.366478][T21071] validate_nla: 1 callbacks suppressed
[  342.366493][T21071] netlink: 'syz.0.5705': attribute type 12 has an invalid length.
[  342.480737][T21079] netlink: 'syz.1.5708': attribute type 29 has an invalid length.
[  342.491749][T21079] netlink: 'syz.1.5708': attribute type 29 has an invalid length.
[  342.556152][T21088] netlink: 'syz.1.5711': attribute type 3 has an invalid length.
[  342.562664][T21088] netlink: 'syz.1.5711': attribute type 3 has an invalid length.
[  342.567124][T21089] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  342.583800][T21088] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  342.592100][T21093] netlink: 'syz.0.5713': attribute type 1 has an invalid length.
[  342.660094][T21093] 8021q: adding VLAN 0 to HW filter on device bond20
[  342.923346][T21120] netlink: 'syz.1.5719': attribute type 16 has an invalid length.
[  342.931460][T21120] netlink: 'syz.1.5719': attribute type 17 has an invalid length.
[  342.960136][T21120] tipc: Resetting bearer <eth:syzkaller0>
[  343.038488][T21128] netlink: 'syz.2.5722': attribute type 1 has an invalid length.
[  343.138380][T12763] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.141985][T12763] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  343.170340][T21128] 8021q: adding VLAN 0 to HW filter on device bond22
[  343.181757][T21129] bond20: (slave macvlan1): Releasing active interface
[  343.191534][T21129] bond22: (slave macvlan1): Enslaving as an active interface with a down link
[  343.195822][T12763] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.201025][T12763] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  343.205800][T12763] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.211222][T12763] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  343.218410][T12763] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.221928][T12763] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  343.332353][T21138] netlink: 'syz.2.5725': attribute type 1 has an invalid length.
[  343.359317][T21138] bond23: entered promiscuous mode
[  343.362440][T21138] 8021q: adding VLAN 0 to HW filter on device bond23
[  343.380758][T21138] 8021q: adding VLAN 0 to HW filter on device bond23
[  343.383883][T21138] bond23: (slave wireguard0): The slave device specified does not support setting the MAC address
[  343.388835][T21138] bond23: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  343.402096][T21138] bond23: (slave wireguard0): making interface the new active one
[  343.405476][T21138] wireguard0: entered promiscuous mode
[  343.410112][T21138] bond23: (slave wireguard0): Enslaving as an active interface with an up link
[  343.727348][T21169] __nla_validate_parse: 8 callbacks suppressed
[  343.727368][T21169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5736'.
[  343.803488][T21179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5738'.
[  343.807942][T21179] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5738'.
[  343.950287][T21191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.987444][T21193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5742'.
[  343.991307][T21193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5742'.
[  343.997889][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5740'.
[  344.024133][T21193] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5742'.
[  344.092179][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5746'.
[  344.130966][T21201] bond27: entered promiscuous mode
[  344.133797][T21201] 8021q: adding VLAN 0 to HW filter on device bond27
[  344.172275][T21201] 8021q: adding VLAN 0 to HW filter on device bond27
[  344.185870][T21201] bond27: (slave vcan0): The slave device specified does not support setting the MAC address
[  344.190413][T21201] bond27: (slave vcan0): Error -95 calling set_mac_address
[  344.333824][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5753'.
[  344.341476][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5753'.
[  344.512603][T21236] bridge11: port 1(veth0_to_bond) entered blocking state
[  344.515550][T21236] bridge11: port 1(veth0_to_bond) entered disabled state
[  344.519797][T21236] veth0_to_bond: entered allmulticast mode
[  344.522971][T21236] veth0_to_bond: entered promiscuous mode
[  344.595009][T21245] : entered promiscuous mode
[  345.147102][T21278] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.270948][T21282] netlink: 'syz.0.5774': attribute type 11 has an invalid length.
[  345.362969][T21288] tun0: tun_chr_ioctl cmd 1074025675
[  345.364916][T21288] tun0: persist enabled
[  345.370023][T21288] tun0: tun_chr_ioctl cmd 1074025675
[  345.372228][T21288] tun0: persist enabled
[  345.551723][T21297] net_ratelimit: 8 callbacks suppressed
[  345.551737][T21297] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  346.017628][T21330] gretap0: refused to change device tx_queue_len
[  346.020795][T21330] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  346.103101][T21332] veth1_virt_wifi: left allmulticast mode
[  346.107295][T21332] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  346.110888][T21332] tipc: Resetting bearer <eth:syzkaller0>
[  346.114241][T21332] syzkaller0: left promiscuous mode
[  346.120605][T21332] syzkaller0: left allmulticast mode
[  346.126370][T21332] veth75: left promiscuous mode
[  346.129538][T21332] bond17: left promiscuous mode
[  346.133390][T21332] veth79: left promiscuous mode
[  346.902091][T21357] nbd: couldn't find a device at index 4194304
[  347.118425][T21363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.144352][T21382] nbd: must specify a device to reconfigure
[  347.605234][T21433] validate_nla: 6 callbacks suppressed
[  347.605254][T21433] netlink: 'syz.1.5812': attribute type 1 has an invalid length.
[  347.618559][T21433] bond26: (slave macvlan1): Releasing active interface
[  347.625514][T21436] openvswitch: netlink: IP tunnel TTL not specified.
[  347.733154][T21444] nbd: must specify a device to reconfigure
[  347.828705][T21466] netlink: 'syz.2.5823': attribute type 1 has an invalid length.
[  347.831980][T21466] netlink: 'syz.2.5823': attribute type 3 has an invalid length.
[  347.834772][T21466] netlink: 'syz.2.5823': attribute type 1 has an invalid length.
[  347.838535][T21466] NCSI netlink: No device for ifindex 0
[  347.844125][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 180 seconds
[  347.849041][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 180 seconds
[  347.853193][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 180 seconds
[  347.857455][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 180 seconds
[  347.891830][T21473] openvswitch: netlink: IP tunnel TTL not specified.
[  347.995630][T21481] macvtap0: entered promiscuous mode
[  347.997736][T21481] macvtap0: entered allmulticast mode
[  348.357767][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  348.362171][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  348.365746][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  348.369189][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  348.372085][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  348.516066][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  348.521062][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  348.525262][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  348.533209][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  348.537599][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  348.599905][T21495] chnl_net:caif_netlink_parms(): no params data found
[  348.654117][T21495] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.657136][T21495] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.659819][T21495] bridge_slave_0: entered allmulticast mode
[  348.662969][T21495] bridge_slave_0: entered promiscuous mode
[  348.668467][T21495] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.671000][T21495] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.673516][T21495] bridge_slave_1: entered allmulticast mode
[  348.677211][T21495] bridge_slave_1: entered promiscuous mode
[  348.698520][T21495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.709498][T21495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.751061][T21495] team0: Port device team_slave_0 added
[  348.758494][T21495] team0: Port device team_slave_1 added
[  348.795343][T21495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.798728][T21495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.809296][T21495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.816160][T21495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.819540][T21495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.831280][T21495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.892737][T21495] hsr_slave_0: entered promiscuous mode
[  348.898321][T21495] hsr_slave_1: entered promiscuous mode
[  349.014072][T21498] chnl_net:caif_netlink_parms(): no params data found
[  349.215470][T21498] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.221147][T21498] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.224457][T21498] bridge_slave_0: entered allmulticast mode
[  349.238419][T21498] bridge_slave_0: entered promiscuous mode
[  349.243076][T21498] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.246150][T21498] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.251426][T21498] bridge_slave_1: entered allmulticast mode
[  349.255430][T21498] bridge_slave_1: entered promiscuous mode
[  349.300160][T21498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.334169][T21498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.406456][T21498] team0: Port device team_slave_0 added
[  349.429007][T21498] team0: Port device team_slave_1 added
[  349.451335][T21495] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  349.474649][T21495] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  349.485166][T21498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.489195][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.500992][T21498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.506599][T21495] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  349.521047][T21495] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  349.535337][T21498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.539917][T21498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.550620][T21498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.674941][T21498] hsr_slave_0: entered promiscuous mode
[  349.678812][T21498] hsr_slave_1: entered promiscuous mode
[  349.682005][T21498] debugfs: 'hsr0' already exists in 'hsr'
[  349.684591][T21498] Cannot create hsr debugfs directory
[  349.784253][T21524] netlink: 'syz.0.5842': attribute type 24 has an invalid length.
[  349.788051][T21524] __nla_validate_parse: 14 callbacks suppressed
[  349.788068][T21524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5842'.
[  349.801544][T21524] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  349.805165][T21524] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  349.965503][T21498] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  349.973677][T21498] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  349.981618][T21498] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  349.995384][T21498] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  350.041153][T21495] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.079028][T21495] 8021q: adding VLAN 0 to HW filter on device team0
[  350.099759][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.102868][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.118313][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.120821][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.193781][T21498] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.230560][T21498] 8021q: adding VLAN 0 to HW filter on device team0
[  350.240689][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.243749][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.258301][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.262505][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.363111][T21546] netlink: 'syz.0.5843': attribute type 1 has an invalid length.
[  350.390302][T21546] 8021q: adding VLAN 0 to HW filter on device bond21
[  350.398179][T21495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.419085][T21546] bond19: (slave macvlan1): Releasing active interface
[  350.425051][T21546] bond21: (slave macvlan1): making interface the new active one
[  350.429239][T21546] bond21: (slave macvlan1): Enslaving as an active interface with an up link
[  350.471178][ T5850] Bluetooth: hci0: command tx timeout
[  350.502448][T21495] veth0_vlan: entered promiscuous mode
[  350.542627][T21495] veth1_vlan: entered promiscuous mode
[  350.547761][T21553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5845'.
[  350.574932][T21498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.608531][T21495] veth0_macvtap: entered promiscuous mode
[  350.620757][T21495] veth1_macvtap: entered promiscuous mode
[  350.626979][ T5850] Bluetooth: hci1: command tx timeout
[  350.658129][T21495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.671309][T21495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.683766][T12763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.718040][T12763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.733030][T12763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.762859][T12763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.790979][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.793692][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.822446][T21498] veth0_vlan: entered promiscuous mode
[  350.828053][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.828711][T21568] netlink: 'syz.0.5847': attribute type 1 has an invalid length.
[  350.831334][T21498] veth1_vlan: entered promiscuous mode
[  350.835502][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.852238][T21568] 8021q: adding VLAN 0 to HW filter on device bond22
[  350.865179][T21568] bond21: (slave macvlan1): Releasing active interface
[  350.873525][T21568] bond22: (slave macvlan1): making interface the new active one
[  350.878286][T21568] bond22: (slave macvlan1): Enslaving as an active interface with an up link
[  350.899355][T21498] veth0_macvtap: entered promiscuous mode
[  350.910212][T21498] veth1_macvtap: entered promiscuous mode
[  350.934552][T21498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.945498][T21498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.954195][ T5909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.958296][ T5909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.963490][ T5909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.967720][ T5909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.051811][T18225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.057435][T18225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.105482][T18225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.111026][T18225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.165608][T21583] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5851'.
[  351.254859][T21593] veth1: mtu less than device minimum
[  351.302856][T21596] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  351.305381][T21596] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  351.314473][T21596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  351.322539][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5855'.
[  351.430269][T21615] netlink: 'syz.3.5861': attribute type 1 has an invalid length.
[  351.492486][T21623] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5863'.
[  351.543440][T21626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5864'.
[  351.579029][T21628] TC_ACT_REPEAT abuse ?
[  351.581319][T21628] TC_ACT_REPEAT abuse ?
[  351.595910][T21631] TC_ACT_REPEAT abuse ?
[  351.729454][T21646] netlink: 'syz.4.5870': attribute type 5 has an invalid length.
[  351.848124][T12763] TC_ACT_REPEAT abuse ?
[  351.851541][T12763] TC_ACT_REPEAT abuse ?
[  351.908488][T21660] netlink: 'syz.4.5875': attribute type 1 has an invalid length.
[  352.043286][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'.
[  352.050210][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'.
[  352.096061][T21677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5880'.
[  352.158030][T21681] 8021q: adding VLAN 0 to HW filter on device bond23
[  352.172901][T21681] bond22: (slave macvlan1): Releasing active interface
[  352.181330][T21681] bond23: (slave macvlan1): making interface the new active one
[  352.185097][T21681] bond23: (slave macvlan1): Enslaving as an active interface with an up link
[  352.188972][ T5895] TC_ACT_REPEAT abuse ?
[  352.366098][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5885'.
[  352.369667][T21692] veth1: entered promiscuous mode
[  352.371680][T21692] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  352.550300][ T5850] Bluetooth: hci0: command tx timeout
[  352.707100][ T5850] Bluetooth: hci1: command tx timeout
[  352.745932][T21722] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  352.751709][T21722] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  352.755070][T21722] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  352.809700][T21728] TC_ACT_REPEAT abuse ?
[  353.020078][T21751] validate_nla: 5 callbacks suppressed
[  353.020098][T21751] netlink: 'syz.0.5903': attribute type 1 has an invalid length.
[  353.161835][T21770] netlink: 'syz.4.5911': attribute type 1 has an invalid length.
[  353.284149][T21785] netlink: 'syz.0.5916': attribute type 10 has an invalid length.
[  353.289519][T21785] netlink: 'syz.0.5916': attribute type 10 has an invalid length.
[  353.598856][T21802] tipc: Started in network mode
[  353.600686][T21802] tipc: Node identity 5a44dfe58cdd, cluster identity 4711
[  353.603153][T21802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.607817][T21803] syzkaller0: entered promiscuous mode
[  353.609724][T21803] syzkaller0: entered allmulticast mode
[  353.625399][T21804] netlink: 'syz.0.5920': attribute type 1 has an invalid length.
[  353.644831][T21804] 8021q: adding VLAN 0 to HW filter on device bond24
[  353.651602][T21802] tipc: Resetting bearer <eth:syzkaller0>
[  353.654989][T21801] tipc: Resetting bearer <eth:syzkaller0>
[  353.670477][T21801] tipc: Disabling bearer <eth:syzkaller0>
[  353.990063][T21822] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  354.138007][T21831] netlink: 'syz.3.5931': attribute type 13 has an invalid length.
[  354.140601][T21831] netlink: 'syz.3.5931': attribute type 17 has an invalid length.
[  354.240092][T21833] 8021q: VLANs not supported on ipvlan1
[  354.254686][T21833] macsec1: entered promiscuous mode
[  354.260331][T21833] macsec1: entered allmulticast mode
[  354.307534][T21838] netlink: 'syz.4.5933': attribute type 1 has an invalid length.
[  354.324651][T21838] 8021q: adding VLAN 0 to HW filter on device bond1
[  354.342128][T21838] bond1: (slave macvlan1): making interface the new active one
[  354.345553][T21838] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  354.432808][T21846] syzkaller1: entered promiscuous mode
[  354.434862][T21846] syzkaller1: entered allmulticast mode
[  354.456460][T21846] bond25: entered promiscuous mode
[  354.458859][T21846] 8021q: adding VLAN 0 to HW filter on device bond25
[  354.593188][T21861] netlink: 'syz.4.5940': attribute type 1 has an invalid length.
[  354.613641][T21861] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.624611][T21861] bond1: (slave macvlan1): Releasing active interface
[  354.629479][ T5850] Bluetooth: hci0: command tx timeout
[  354.636003][T21861] bond2: (slave macvlan1): making interface the new active one
[  354.639857][T21861] bond2: (slave macvlan1): Enslaving as an active interface with an up link
[  354.659601][T21867] netlink: 'syz.0.5942': attribute type 1 has an invalid length.
[  354.685277][T21867] 8021q: adding VLAN 0 to HW filter on device bond26
[  354.697590][T21867] bond23: (slave macvlan1): Releasing active interface
[  354.705844][T21867] bond26: (slave macvlan1): making interface the new active one
[  354.710776][T21867] bond26: (slave macvlan1): Enslaving as an active interface with an up link
[  354.721745][T21870] tipc: Started in network mode
[  354.723655][T21870] tipc: Node identity 72c2dab285b5, cluster identity 4711
[  354.726138][T21870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.734705][T21870] tipc: Resetting bearer <eth:syzkaller0>
[  354.768281][T21869] tipc: Disabling bearer <eth:syzkaller0>
[  354.788095][ T5850] Bluetooth: hci1: command tx timeout
[  355.067511][T21883] __nla_validate_parse: 17 callbacks suppressed
[  355.067529][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5948'.
[  355.074268][T21883] bridge_slave_1: left allmulticast mode
[  355.080907][T21883] bridge_slave_1: left promiscuous mode
[  355.083774][T21883] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.089068][T21883] bridge_slave_0: left allmulticast mode
[  355.091645][T21883] bridge_slave_0: left promiscuous mode
[  355.093839][T21883] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.638900][T21875] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  355.694156][T21886] 8021q: adding VLAN 0 to HW filter on device bond27
[  355.704823][T21886] bond26: (slave macvlan1): Releasing active interface
[  355.715686][T21886] bond27: (slave macvlan1): making interface the new active one
[  355.720081][T21886] bond27: (slave macvlan1): Enslaving as an active interface with an up link
[  356.033443][  T791] IPVS: starting estimator thread 0...
[  356.070086][T21914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5958'.
[  356.073580][T21914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5958'.
[  356.105398][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'.
[  356.131940][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5959'.
[  356.137628][T21915] IPVS: using max 78 ests per chain, 187200 per kthread
[  356.329554][T21931] 8021q: adding VLAN 0 to HW filter on device bond3
[  356.339984][T21931] bond2: (slave macvlan1): Releasing active interface
[  356.346508][T21931] bond3: (slave macvlan1): making interface the new active one
[  356.350875][T21931] bond3: (slave macvlan1): Enslaving as an active interface with an up link
[  356.605162][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5967'.
[  356.707557][ T5850] Bluetooth: hci0: command tx timeout
[  356.762543][T21947] bond4: entered promiscuous mode
[  356.765162][T21947] 8021q: adding VLAN 0 to HW filter on device bond4
[  356.786170][T21947] 8021q: adding VLAN 0 to HW filter on device bond4
[  356.791896][T21947] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  356.795367][T21947] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  356.805985][T21947] bond4: (slave wireguard0): making interface the new active one
[  356.810119][T21947] wireguard0: entered promiscuous mode
[  356.813069][T21947] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  356.820520][T21947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.824262][T21947] IPv6: NLM_F_CREATE should be set when creating new route
[  356.826778][T21947] IPv6: NLM_F_CREATE should be set when creating new route
[  356.831247][T21947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.867285][ T5850] Bluetooth: hci1: command tx timeout
[  356.889140][T21955] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5970'.
[  356.892111][T21955] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5970'.
[  356.941450][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5971'.
[  356.945339][T21958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5971'.
[  357.194255][T21975] ieee802154 phy0 wpan0: encryption failed: -22
[  357.546456][T21980] IPv6: NLM_F_CREATE should be specified when creating new route
[  357.552003][T21980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.555202][T21980] IPv6: NLM_F_CREATE should be set when creating new route
[  357.558445][T21980] IPv6: NLM_F_CREATE should be set when creating new route
[  357.561426][T21980] IPv6: NLM_F_CREATE should be set when creating new route
[  357.783467][T21992] net_ratelimit: 11 callbacks suppressed
[  357.783487][T21992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.179066][T22010] TC_ACT_REPEAT abuse ?
[  358.182031][    C1] TC_ACT_REPEAT abuse ?
[  358.228932][T22020] validate_nla: 7 callbacks suppressed
[  358.228950][T22020] netlink: 'syz.3.5993': attribute type 12 has an invalid length.
[  358.375885][T22034] nbd: couldn't find a device at index 1073741824
[  358.445873][T22043] TC_ACT_REPEAT abuse ?
[  358.447953][    C0] TC_ACT_REPEAT abuse ?
[  358.454524][T22043] TC_ACT_REPEAT abuse ?
[  358.457613][ T5872] TC_ACT_REPEAT abuse ?
[  358.462097][T22043] TC_ACT_REPEAT abuse ?
[  358.464038][    C0] TC_ACT_REPEAT abuse ?
[  358.469586][T22043] netlink: 'syz.3.6003': attribute type 1 has an invalid length.
[  358.501313][T22046] netlink: 'syz.3.6004': attribute type 1 has an invalid length.
[  358.517960][T22046] 8021q: adding VLAN 0 to HW filter on device bond1
[  358.585880][T22051] bond1: (slave macvlan1): making interface the new active one
[  358.590644][T22051] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  358.786848][ T5237] Bluetooth: hci0: command 0x0401 tx timeout
[  358.806086][T22063] syzkaller0: entered promiscuous mode
[  358.808305][T22063] syzkaller0: entered allmulticast mode
[  358.896489][T22070] netlink: 'syz.0.6011': attribute type 1 has an invalid length.
[  358.914659][T22070] 8021q: adding VLAN 0 to HW filter on device bond28
[  358.929790][T22070] bond27: (slave macvlan1): Releasing active interface
[  358.935647][T22070] bond28: (slave macvlan1): making interface the new active one
[  358.939061][T22070] bond28: (slave macvlan1): Enslaving as an active interface with an up link
[  358.948517][ T5237] Bluetooth: hci1: command tx timeout
[  359.171322][T22095] nbd: couldn't find a device at index -129
[  359.175741][T22097] TC_ACT_REPEAT abuse ?
[  359.322857][T22115] nbd: couldn't find a device at index -16
[  359.524808][T22137] netlink: 'syz.0.6036': attribute type 9 has an invalid length.
[  359.618622][T22151] netlink: 'syz.3.6042': attribute type 1 has an invalid length.
[  359.621650][T22145] bond29: entered promiscuous mode
[  359.623380][T22145] bond29: entered allmulticast mode
[  359.625526][T22145] 8021q: adding VLAN 0 to HW filter on device bond29
[  359.664707][T22151] 8021q: adding VLAN 0 to HW filter on device bond2
[  359.725855][T22159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.730264][T22159] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.740321][T22159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.743104][T22159] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.005275][T22174] netlink: 'syz.3.6050': attribute type 1 has an invalid length.
[  360.084047][T22174] 8021q: adding VLAN 0 to HW filter on device bond3
[  360.261813][T22195] __nla_validate_parse: 14 callbacks suppressed
[  360.261831][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6057'.
[  360.309521][T22201] nbd: couldn't find a device at index 16128
[  360.411781][T22217] netlink: 'syz.4.6065': attribute type 3 has an invalid length.
[  360.474389][T22223] netlink: 'syz.0.6068': attribute type 1 has an invalid length.
[  360.492554][T22223] 8021q: adding VLAN 0 to HW filter on device bond30
[  361.003040][T22255] syzkaller0: entered promiscuous mode
[  361.005350][T22255] syzkaller0: entered allmulticast mode
[  361.011552][T22255] netlink: 'syz.3.6078': attribute type 21 has an invalid length.
[  361.014486][T22255] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6078'.
[  361.018294][T22255] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6078'.
[  361.026514][T22261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'.
[  361.026970][ T5237] Bluetooth: hci1: command 0x0405 tx timeout
[  361.131892][T22263] 8021q: adding VLAN 0 to HW filter on device bond4
[  361.163463][T22266] tipc: New replicast peer: 255.255.255.255
[  361.166188][T22266] tipc: Enabled bearer <udp:syz2>, priority 10
[  361.170025][T22266] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  361.215022][T22271] nbd: couldn't find a device at index 196608
[  361.310036][T22274] lo: entered promiscuous mode
[  361.342121][T22272] lo: left promiscuous mode
[  361.388106][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6087'.
[  361.418313][T22281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6088'.
[  361.426244][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'.
[  361.438721][T22281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6088'.
[  361.539612][T22290] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6092'.
[  361.608552][T22302] nbd: couldn't find a device at index 786432
[  361.631403][T22304] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  361.637435][T22304] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  361.644052][T22306] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6098'.
[  361.699130][T22310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.701975][T22310] syzkaller0: entered promiscuous mode
[  361.704100][T22310] syzkaller0: entered allmulticast mode
[  361.717470][T22310] tipc: Resetting bearer <eth:syzkaller0>
[  361.726180][T22309] tipc: Resetting bearer <eth:syzkaller0>
[  361.741639][T22309] tipc: Disabling bearer <eth:syzkaller0>
[  361.851726][T22328] nbd: couldn't find a device at index 4128768
[  362.549785][T22343] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  362.560618][T22343] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  362.765298][T22350] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.770799][T22350] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.834550][T22360] Bluetooth: MGMT ver 1.23
[  362.963118][T22375] 8021q: adding VLAN 0 to HW filter on device bond5
[  363.117741][T22389] nbd: couldn't find a device at index 16773120
[  363.192675][  T791] net_ratelimit: 10 callbacks suppressed
[  363.192694][  T791] TC_ACT_REPEAT abuse ?
[  363.237080][T22399] TC_ACT_REPEAT abuse ?
[  363.239301][    C0] TC_ACT_REPEAT abuse ?
[  363.768522][T22443] validate_nla: 6 callbacks suppressed
[  363.768545][T22443] netlink: 'syz.3.6152': attribute type 3 has an invalid length.
[  363.960114][T22451] geneve2: entered promiscuous mode
[  363.962667][T22451] geneve2: entered allmulticast mode
[  364.467371][    C0] TC_ACT_REPEAT abuse ?
[  364.527050][T22456] netlink: 'syz.4.6155': attribute type 1 has an invalid length.
[  364.555234][T22456] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.605472][T22459] sctp: [Deprecated]: syz.4.6156 (pid 22459) Use of int in maxseg socket option.
[  364.605472][T22459] Use struct sctp_assoc_value instead
[  364.899989][T22481] syzkaller1: entered promiscuous mode
[  364.901975][T22481] syzkaller1: entered allmulticast mode
[  365.031141][T22491] netlink: 'syz.0.6168': attribute type 1 has an invalid length.
[  365.088956][T22491] 8021q: adding VLAN 0 to HW filter on device bond31
[  365.210441][T22506] netlink: 'syz.4.6173': attribute type 15 has an invalid length.
[  365.243914][T22508] netlink: 'syz.0.6175': attribute type 1 has an invalid length.
[  365.264466][T22508] 8021q: adding VLAN 0 to HW filter on device bond32
[  365.308331][T22518] netlink: 'syz.4.6178': attribute type 1 has an invalid length.
[  365.350704][T22518] 8021q: adding VLAN 0 to HW filter on device bond7
[  365.797626][T22532] netlink: 'syz.3.6183': attribute type 1 has an invalid length.
[  365.823044][T22532] 8021q: adding VLAN 0 to HW filter on device bond5
[  365.858666][T22535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.861935][T22535] syzkaller0: entered promiscuous mode
[  365.863838][T22535] syzkaller0: entered allmulticast mode
[  365.879136][T22535] tipc: Resetting bearer <eth:syzkaller0>
[  365.883514][T22534] tipc: Resetting bearer <eth:syzkaller0>
[  365.895269][T22534] tipc: Disabling bearer <eth:syzkaller0>
[  366.208056][T22547] nbd: couldn't find a device at index 1056964608
[  366.382641][T22560] TC_ACT_REPEAT abuse ?
[  366.385007][T22560] TC_ACT_REPEAT abuse ?
[  366.388941][T22563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.397330][T22560] TC_ACT_REPEAT abuse ?
[  366.399789][T22560] TC_ACT_REPEAT abuse ?
[  366.402029][T22560] TC_ACT_REPEAT abuse ?
[  366.404922][T22560] TC_ACT_REPEAT abuse ?
[  366.409627][T22560] __nla_validate_parse: 18 callbacks suppressed
[  366.409640][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6195'.
[  366.435341][T22565] sctp: [Deprecated]: syz.0.6198 (pid 22565) Use of int in maxseg socket option.
[  366.435341][T22565] Use struct sctp_assoc_value instead
[  366.495192][T22572] netlink: 'syz.4.6200': attribute type 1 has an invalid length.
[  366.527508][T22572] 8021q: adding VLAN 0 to HW filter on device bond8
[  366.534147][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6203'.
[  366.538666][T22578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6203'.
[  366.569835][T22584] netlink: 'syz.4.6204': attribute type 1 has an invalid length.
[  366.595661][T22584] 8021q: adding VLAN 0 to HW filter on device bond9
[  366.614199][T22584] gretap1: entered promiscuous mode
[  366.629595][T22584] bond9: (slave gretap1): making interface the new active one
[  366.633435][T22584] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  366.652494][T22584] macvlan2: entered promiscuous mode
[  366.654631][T22584] macvlan2: entered allmulticast mode
[  366.660968][T22584] bond9: entered promiscuous mode
[  366.663460][T22584] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  366.668006][T22584] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  366.673928][T22584] bond9: left promiscuous mode
[  366.806031][T22600] netlink: 'syz.3.6209': attribute type 19 has an invalid length.
[  366.811425][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'.
[  366.823833][ T5909] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.823903][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'.
[  366.829893][ T5909] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.835304][ T5909] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  366.839840][ T5909] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.844395][T22600] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6209'.
[  366.980254][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6213'.
[  367.033217][T22611] 8021q: adding VLAN 0 to HW filter on device bond6
[  367.045325][T22611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.050333][T22611] bond6: (slave batadv0): making interface the new active one
[  367.054044][T22611] bond6: (slave batadv0): Enslaving as an active interface with an up link
[  367.145080][T22618] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  367.323190][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6220'.
[  367.399130][T22631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6222'.
[  367.437985][T22633] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  367.441192][T22633] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  368.160643][T22655] nbd: couldn't find a device at index -262144
[  368.193698][T22657] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6233'.
[  369.440618][T22704] validate_nla: 5 callbacks suppressed
[  369.440628][T22704] netlink: 'syz.3.6247': attribute type 1 has an invalid length.
[  369.518677][T22706] wg1: entered promiscuous mode
[  369.520899][T22706] wg1: entered allmulticast mode
[  369.625372][T22711] 
[  369.626442][T22711] ======================================================
[  369.629354][T22711] WARNING: possible circular locking dependency detected
[  369.632314][T22711] syzkaller #0 Not tainted
[  369.634313][T22711] ------------------------------------------------------
[  369.638108][T22711] syz.0.6249/22711 is trying to acquire lock:
[  369.640727][T22711] ffffffff8f68f718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  369.644457][T22711] 
[  369.644457][T22711] but task is already holding lock:
[  369.647578][T22711] ffff888129c97370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  369.651439][T22711] 
[  369.651439][T22711] which lock already depends on the new lock.
[  369.651439][T22711] 
[  369.655675][T22711] 
[  369.655675][T22711] the existing dependency chain (in reverse order) is:
[  369.659378][T22711] 
[  369.659378][T22711] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  369.662771][T22711]        lock_acquire+0x120/0x360
[  369.664841][T22711]        _raw_spin_lock_bh+0x36/0x50
[  369.667069][T22711]        nr_rt_ioctl+0x193/0xd50
[  369.669142][T22711]        sock_do_ioctl+0xdc/0x300
[  369.671218][T22711]        sock_ioctl+0x576/0x790
[  369.673247][T22711]        __se_sys_ioctl+0xfc/0x170
[  369.675363][T22711]        do_syscall_64+0xfa/0x3b0
[  369.677596][T22711]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.680241][T22711] 
[  369.680241][T22711] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  369.683479][T22711]        lock_acquire+0x120/0x360
[  369.685510][T22711]        _raw_spin_lock_bh+0x36/0x50
[  369.687791][T22711]        nr_rt_device_down+0xa9/0x720
[  369.690038][T22711]        nr_device_event+0x137/0x150
[  369.692296][T22711]        notifier_call_chain+0x1b6/0x3e0
[  369.694688][T22711]        netif_close_many+0x29c/0x410
[  369.696956][T22711]        netif_close+0x158/0x210
[  369.699068][T22711]        dev_close+0x10a/0x220
[  369.701053][T22711]        bpq_device_event+0x377/0x6a0
[  369.703336][T22711]        notifier_call_chain+0x1b6/0x3e0
[  369.705721][T22711]        __dev_notify_flags+0x18d/0x2e0
[  369.708015][T22711]        netif_change_flags+0xe8/0x1a0
[  369.710276][T22711]        dev_change_flags+0x130/0x260
[  369.712502][T22711]        dev_ioctl+0x7b4/0x1150
[  369.714503][T22711]        sock_do_ioctl+0x22c/0x300
[  369.716614][T22711]        sock_ioctl+0x576/0x790
[  369.718615][T22711]        __se_sys_ioctl+0xfc/0x170
[  369.720661][T22711]        do_syscall_64+0xfa/0x3b0
[  369.722690][T22711]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.725292][T22711] 
[  369.725292][T22711] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  369.728511][T22711]        validate_chain+0xb9b/0x2140
[  369.730735][T22711]        __lock_acquire+0xab9/0xd20
[  369.732922][T22711]        lock_acquire+0x120/0x360
[  369.735075][T22711]        _raw_spin_lock_bh+0x36/0x50
[  369.737312][T22711]        nr_rt_ioctl+0x390/0xd50
[  369.739428][T22711]        sock_do_ioctl+0xdc/0x300
[  369.741583][T22711]        sock_ioctl+0x576/0x790
[  369.743661][T22711]        __se_sys_ioctl+0xfc/0x170
[  369.745838][T22711]        do_syscall_64+0xfa/0x3b0
[  369.747922][T22711]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.750547][T22711] 
[  369.750547][T22711] other info that might help us debug this:
[  369.750547][T22711] 
[  369.754744][T22711] Chain exists of:
[  369.754744][T22711]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  369.754744][T22711] 
[  369.760336][T22711]  Possible unsafe locking scenario:
[  369.760336][T22711] 
[  369.763360][T22711]        CPU0                    CPU1
[  369.765589][T22711]        ----                    ----
[  369.767843][T22711]   lock(&nr_node->node_lock);
[  369.769827][T22711]                                lock(nr_node_list_lock);
[  369.772761][T22711]                                lock(&nr_node->node_lock);
[  369.775738][T22711]   lock(nr_neigh_list_lock);
[  369.777689][T22711] 
[  369.777689][T22711]  *** DEADLOCK ***
[  369.777689][T22711] 
[  369.780993][T22711] 2 locks held by syz.0.6249/22711:
[  369.783134][T22711]  #0: ffffffff8f68f778 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  369.786972][T22711]  #1: ffff888129c97370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  369.790826][T22711] 
[  369.790826][T22711] stack backtrace:
[  369.793263][T22711] CPU: 0 UID: 0 PID: 22711 Comm: syz.0.6249 Not tainted syzkaller #0 PREEMPT(full) 
[  369.793280][T22711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.793288][T22711] Call Trace:
[  369.793297][T22711]  <TASK>
[  369.793303][T22711]  dump_stack_lvl+0x189/0x250
[  369.793322][T22711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.793337][T22711]  ? __pfx__printk+0x10/0x10
[  369.793353][T22711]  ? stack_trace_save+0x9c/0xe0
[  369.793371][T22711]  print_circular_bug+0x2ee/0x310
[  369.793387][T22711]  check_noncircular+0x134/0x160
[  369.793402][T22711]  validate_chain+0xb9b/0x2140
[  369.793422][T22711]  __lock_acquire+0xab9/0xd20
[  369.793440][T22711]  ? nr_rt_ioctl+0x390/0xd50
[  369.793455][T22711]  lock_acquire+0x120/0x360
[  369.793472][T22711]  ? nr_rt_ioctl+0x390/0xd50
[  369.793491][T22711]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  369.793514][T22711]  ? nr_rt_ioctl+0x390/0xd50
[  369.793529][T22711]  _raw_spin_lock_bh+0x36/0x50
[  369.793546][T22711]  ? nr_rt_ioctl+0x390/0xd50
[  369.793658][T22711]  nr_rt_ioctl+0x390/0xd50
[  369.793680][T22711]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  369.793699][T22711]  ? apparmor_capable+0x137/0x1b0
[  369.793720][T22711]  ? capable+0x89/0xe0
[  369.793732][T22711]  ? nr_ioctl+0x1b1/0x3b0
[  369.793747][T22711]  sock_do_ioctl+0xdc/0x300
[  369.793767][T22711]  ? __pfx_sock_do_ioctl+0x10/0x10
[  369.793785][T22711]  ? __lock_acquire+0xab9/0xd20
[  369.793807][T22711]  sock_ioctl+0x576/0x790
[  369.793823][T22711]  ? __pfx_sock_ioctl+0x10/0x10
[  369.793838][T22711]  ? __fget_files+0x2a/0x420
[  369.793849][T22711]  ? __fget_files+0x3a0/0x420
[  369.793859][T22711]  ? __fget_files+0x2a/0x420
[  369.793871][T22711]  ? bpf_lsm_file_ioctl+0x9/0x20
[  369.793885][T22711]  ? __pfx_sock_ioctl+0x10/0x10
[  369.793900][T22711]  __se_sys_ioctl+0xfc/0x170
[  369.793914][T22711]  do_syscall_64+0xfa/0x3b0
[  369.793927][T22711]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.793937][T22711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.793948][T22711]  ? exc_page_fault+0x9f/0xf0
[  369.793960][T22711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.793971][T22711] RIP: 0033:0x7efc8618eba9
[  369.793984][T22711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.793995][T22711] RSP: 002b:00007efc87005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  369.794009][T22711] RAX: ffffffffffffffda RBX: 00007efc863d5fa0 RCX: 00007efc8618eba9
[  369.794018][T22711] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007
[  369.794025][T22711] RBP: 00007efc86211e19 R08: 0000000000000000 R09: 0000000000000000
[  369.794032][T22711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.794039][T22711] R13: 00007efc863d6038 R14: 00007efc863d5fa0 R15: 00007fffe60a1828
[  369.794053][T22711]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  370.304293][ T5707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.309907][ T5707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.371407][ T5707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.375834][ T5707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.422000][ T5707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.425976][ T5707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.480969][ T5707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.484713][ T5707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.775349][ T5707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.781150][ T5707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.785940][ T5707] bond0 (unregistering): Released all slaves
[  370.797694][ T5707] bond1 (unregistering): (slave macvlan1): Releasing active interface
[  370.802619][ T5707] bond1 (unregistering): Released all slaves
[  370.893489][ T5707] bond2 (unregistering): Released all slaves
[  370.983428][ T5707] bond3 (unregistering): Released all slaves
[  371.065405][ T5707] bond4 (unregistering): Released all slaves
[  371.139278][ T5707] bond5 (unregistering): Released all slaves
[  371.145480][ T5707] bond6 (unregistering): (slave batadv0): Releasing active interface
[  371.149330][ T5707] bond6 (unregistering): Released all slaves
[  371.221249][ T5707] tipc: Left network mode
[  371.430580][ T5707] hsr_slave_0: left promiscuous mode
[  371.433259][ T5707] hsr_slave_1: left promiscuous mode
[  371.471218][ T5707] veth1_macvtap: left promiscuous mode
[  371.473363][ T5707] veth0_macvtap: left promiscuous mode
[  371.475546][ T5707] veth1_vlan: left promiscuous mode
[  371.478192][ T5707] veth0_vlan: left promiscuous mode
[  371.589510][ T5707] team0 (unregistering): Port device team_slave_1 removed
[  371.610500][ T5707] team0 (unregistering): Port device team_slave_0 removed
[  372.082211][ T5707] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.151540][ T5707] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.192418][ T5707] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.244446][ T5707] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.325067][ T5707] bridge_slave_1: left allmulticast mode
[  372.327794][ T5707] bridge_slave_1: left promiscuous mode
[  372.330172][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.333818][ T5707] bridge_slave_0: left allmulticast mode
[  372.335721][ T5707] bridge_slave_0: left promiscuous mode
[  372.338001][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.391819][ T5707] bond9 (unregistering): (slave gretap1): Releasing active interface
[  372.550789][ T5707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.554816][ T5707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.558841][ T5707] bond0 (unregistering): Released all slaves
[  372.637266][ T5707] bond1 (unregistering): Released all slaves
[  372.708181][ T5707] bond2 (unregistering): Released all slaves
[  372.714110][ T5707] bond3 (unregistering): (slave macvlan1): Releasing active interface
[  372.717398][ T5707] veth1_vlan: left promiscuous mode
[  372.719927][ T5707] bond3 (unregistering): Released all slaves
[  372.790725][ T5707] bond4 (unregistering): (slave wireguard0): Releasing backup interface
[  372.793666][ T5707] wireguard0: left promiscuous mode
[  372.796247][ T5707] bond4 (unregistering): Released all slaves
[  372.864636][ T5707] bond5 (unregistering): Released all slaves
[  372.936444][ T5707] bond6 (unregistering): Released all slaves
[  373.011274][ T5707] bond7 (unregistering): Released all slaves
[  373.089262][ T5707] bond8 (unregistering): Released all slaves
[  373.094121][ T5707] bond9 (unregistering): Released all slaves
[  373.194352][ T5707] tipc: Left network mode
[  373.358026][ T5707] hsr_slave_0: left promiscuous mode
[  373.360648][ T5707] hsr_slave_1: left promiscuous mode
[  373.362701][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.365066][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.368209][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.370912][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.376246][ T5707] veth1_macvtap: left promiscuous mode
[  373.391062][ T5707] veth0_macvtap: left promiscuous mode
[  373.402801][ T5707] veth0_vlan: left promiscuous mode
[  373.571330][ T5707] team0 (unregistering): Port device team_slave_1 removed
[  373.588196][ T5707] team0 (unregistering): Port device team_slave_0 removed
[  374.074295][ T5707] IPVS: stop unused estimator thread 0...
[  377.907331][ T1129] block nbd1: Possible stuck request ffff888022918000: control (read@0,1024B). Runtime 210 seconds
[  377.910923][ T1129] block nbd1: Possible stuck request ffff888022918200: control (read@1024,1024B). Runtime 210 seconds
[  377.914337][ T1129] block nbd1: Possible stuck request ffff888022918400: control (read@2048,1024B). Runtime 210 seconds
[  377.917944][ T1129] block nbd1: Possible stuck request ffff888022918600: control (read@3072,1024B). Runtime 210 seconds
[  378.549510][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.552108][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
08:15:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000130a RDI=000000000000130b RBP=00000000000003f8 RSP=ffffc900076d7150
R8 =ffff888106890237 R9 =1ffff11020d12046 R10=dffffc0000000000 R11=ffffffff854fb6e0
R12=dffffc0000000000 R13=ffffffff99b008d4 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fb75c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc870056c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000003f0 CR3=0000000029ef8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efc863a7498 00007efc863a7470 XMM03=00007efc863a74a8 00007efc863a74a0
XMM04=00007efc86f0d100 00007efc863a7460 XMM05=00007efc863a7478 00007efc863a74c0
XMM06=00007efc863a74b8 00007efc863a74b0 XMM07=00007efc863a74a8 00007efc863a74a0
XMM08=0000000000000000 00007efc86212ee7 XMM09=0000000000000000 00007efc86212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c1f45a119d8fdf00 RBX=ffff8881336e9140 RCX=c1f45a119d8fdf00 RDX=0000000000000000
RSI=ffffffff8be33e60 RDI=ffff8881336e9140 RBP=ffffc900077174e0 RSP=ffffc90007717458
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f474c7
R12=dffffc0000000000 R13=ffff8881336e9140 R14=1ffff92000ee2e8c R15=dffffc0000000000
RIP=ffffffff819e1aa0 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbf6ecda6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c311569 CR3=0000000032f5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=57f16717df2ee1a6 d190406197c3e499
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007fbf6eb0d100 00007fbf6dfa7460 XMM05=00007fbf6dfa7478 00007fbf6dfa74c0
XMM06=00007fbf6dfa74b8 00007fbf6dfa74b0 XMM07=00007fbf6dfa74a8 00007fbf6dfa74a0
XMM08=a3920e8695a7ba3c f1ebd4b7c9c453d8 XMM09=0000000000000000 00007fbf6de12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
